add doc for --as-group in cli
Add doc for this pr: https://github.com/kubernetes/kubernetes/pull/43696
This commit is contained in:
@@ -614,13 +614,13 @@ Impersonate-Extra-scopes: development
|
|||||||
```
|
```
|
||||||
|
|
||||||
When using `kubectl` set the `--as` flag to configure the `Impersonate-User`
|
When using `kubectl` set the `--as` flag to configure the `Impersonate-User`
|
||||||
header.
|
header, set the `--as-group` flag to configure the `Impersonate-Group` header.
|
||||||
|
|
||||||
```shell
|
```shell
|
||||||
$ kubectl drain mynode
|
$ kubectl drain mynode
|
||||||
Error from server (Forbidden): User "clark" cannot get nodes at the cluster scope. (get nodes mynode)
|
Error from server (Forbidden): User "clark" cannot get nodes at the cluster scope. (get nodes mynode)
|
||||||
|
|
||||||
$ kubectl drain mynode --as=superman
|
$ kubectl drain mynode --as=superman --as-group=system:masters
|
||||||
node "mynode" cordoned
|
node "mynode" cordoned
|
||||||
node "mynode" drained
|
node "mynode" drained
|
||||||
```
|
```
|
||||||
|
|||||||
Reference in New Issue
Block a user