From ac4c545b91345122801e19919e917cedd3cb4753 Mon Sep 17 00:00:00 2001 From: deads2k Date: Mon, 28 Mar 2016 14:33:58 -0400 Subject: [PATCH] add act-as powers --- contrib/completions/bash/kubectl | 50 ++++++++++++ docs/man/man1/kubectl-annotate.1 | 4 + docs/man/man1/kubectl-api-versions.1 | 4 + docs/man/man1/kubectl-apply.1 | 4 + docs/man/man1/kubectl-attach.1 | 4 + docs/man/man1/kubectl-autoscale.1 | 4 + docs/man/man1/kubectl-cluster-info.1 | 4 + .../man/man1/kubectl-config-current-context.1 | 4 + docs/man/man1/kubectl-config-set-cluster.1 | 4 + docs/man/man1/kubectl-config-set-context.1 | 4 + .../man/man1/kubectl-config-set-credentials.1 | 4 + docs/man/man1/kubectl-config-set.1 | 4 + docs/man/man1/kubectl-config-unset.1 | 4 + docs/man/man1/kubectl-config-use-context.1 | 4 + docs/man/man1/kubectl-config-view.1 | 4 + docs/man/man1/kubectl-config.1 | 4 + docs/man/man1/kubectl-convert.1 | 4 + docs/man/man1/kubectl-cordon.1 | 4 + docs/man/man1/kubectl-create-configmap.1 | 4 + docs/man/man1/kubectl-create-namespace.1 | 4 + .../kubectl-create-secret-docker-registry.1 | 4 + docs/man/man1/kubectl-create-secret-generic.1 | 4 + docs/man/man1/kubectl-create-secret.1 | 4 + docs/man/man1/kubectl-create-serviceaccount.1 | 4 + docs/man/man1/kubectl-create.1 | 4 + docs/man/man1/kubectl-delete.1 | 4 + docs/man/man1/kubectl-describe.1 | 4 + docs/man/man1/kubectl-drain.1 | 4 + docs/man/man1/kubectl-edit.1 | 4 + docs/man/man1/kubectl-exec.1 | 4 + docs/man/man1/kubectl-explain.1 | 4 + docs/man/man1/kubectl-expose.1 | 4 + docs/man/man1/kubectl-get.1 | 4 + docs/man/man1/kubectl-label.1 | 4 + docs/man/man1/kubectl-logs.1 | 4 + docs/man/man1/kubectl-namespace.1 | 4 + docs/man/man1/kubectl-patch.1 | 4 + docs/man/man1/kubectl-port-forward.1 | 4 + docs/man/man1/kubectl-proxy.1 | 4 + docs/man/man1/kubectl-replace.1 | 4 + docs/man/man1/kubectl-rolling-update.1 | 4 + docs/man/man1/kubectl-rollout-history.1 | 4 + docs/man/man1/kubectl-rollout-pause.1 | 4 + docs/man/man1/kubectl-rollout-resume.1 | 4 + docs/man/man1/kubectl-rollout-undo.1 | 4 + docs/man/man1/kubectl-rollout.1 | 4 + docs/man/man1/kubectl-run.1 | 4 + docs/man/man1/kubectl-scale.1 | 4 + docs/man/man1/kubectl-stop.1 | 4 + docs/man/man1/kubectl-uncordon.1 | 4 + docs/man/man1/kubectl-version.1 | 4 + docs/man/man1/kubectl.1 | 4 + docs/user-guide/kubectl/kubectl.md | 3 +- docs/user-guide/kubectl/kubectl_annotate.md | 1 + .../kubectl/kubectl_api-versions.md | 3 +- docs/user-guide/kubectl/kubectl_apply.md | 1 + docs/user-guide/kubectl/kubectl_attach.md | 3 +- docs/user-guide/kubectl/kubectl_autoscale.md | 1 + .../kubectl/kubectl_cluster-info.md | 3 +- docs/user-guide/kubectl/kubectl_config.md | 3 +- .../kubectl/kubectl_config_current-context.md | 3 +- .../kubectl/kubectl_config_set-cluster.md | 3 +- .../kubectl/kubectl_config_set-context.md | 3 +- .../kubectl/kubectl_config_set-credentials.md | 3 +- docs/user-guide/kubectl/kubectl_config_set.md | 3 +- .../kubectl/kubectl_config_unset.md | 3 +- .../kubectl/kubectl_config_use-context.md | 3 +- .../user-guide/kubectl/kubectl_config_view.md | 3 +- docs/user-guide/kubectl/kubectl_convert.md | 1 + docs/user-guide/kubectl/kubectl_cordon.md | 3 +- docs/user-guide/kubectl/kubectl_create.md | 1 + .../kubectl/kubectl_create_configmap.md | 3 +- .../kubectl/kubectl_create_namespace.md | 3 +- .../kubectl/kubectl_create_secret.md | 3 +- .../kubectl_create_secret_docker-registry.md | 3 +- .../kubectl/kubectl_create_secret_generic.md | 3 +- .../kubectl/kubectl_create_serviceaccount.md | 3 +- docs/user-guide/kubectl/kubectl_delete.md | 1 + docs/user-guide/kubectl/kubectl_describe.md | 1 + docs/user-guide/kubectl/kubectl_drain.md | 3 +- docs/user-guide/kubectl/kubectl_edit.md | 1 + docs/user-guide/kubectl/kubectl_exec.md | 3 +- docs/user-guide/kubectl/kubectl_explain.md | 1 + docs/user-guide/kubectl/kubectl_expose.md | 1 + docs/user-guide/kubectl/kubectl_get.md | 1 + docs/user-guide/kubectl/kubectl_label.md | 1 + docs/user-guide/kubectl/kubectl_logs.md | 3 +- docs/user-guide/kubectl/kubectl_namespace.md | 3 +- docs/user-guide/kubectl/kubectl_patch.md | 1 + .../kubectl/kubectl_port-forward.md | 3 +- docs/user-guide/kubectl/kubectl_proxy.md | 3 +- docs/user-guide/kubectl/kubectl_replace.md | 1 + .../kubectl/kubectl_rolling-update.md | 3 +- docs/user-guide/kubectl/kubectl_rollout.md | 3 +- .../kubectl/kubectl_rollout_history.md | 1 + .../kubectl/kubectl_rollout_pause.md | 1 + .../kubectl/kubectl_rollout_resume.md | 1 + .../kubectl/kubectl_rollout_undo.md | 1 + docs/user-guide/kubectl/kubectl_run.md | 3 +- docs/user-guide/kubectl/kubectl_scale.md | 1 + docs/user-guide/kubectl/kubectl_uncordon.md | 3 +- docs/user-guide/kubectl/kubectl_version.md | 3 +- pkg/apiserver/handlers.go | 61 ++++++++++++++ pkg/client/restclient/config.go | 3 + pkg/client/restclient/transport.go | 1 + pkg/client/transport/config.go | 3 + pkg/client/transport/round_trippers.go | 32 ++++++++ pkg/client/unversioned/clientcmd/api/types.go | 2 + .../unversioned/clientcmd/api/v1/types.go | 2 + .../unversioned/clientcmd/client_config.go | 6 ++ pkg/client/unversioned/clientcmd/overrides.go | 4 + pkg/genericapiserver/genericapiserver.go | 1 + test/integration/auth_test.go | 81 +++++++++++++++++++ 113 files changed, 531 insertions(+), 31 deletions(-) diff --git a/contrib/completions/bash/kubectl b/contrib/completions/bash/kubectl index bf31f29158d85..5c22b62c655bf 100644 --- a/contrib/completions/bash/kubectl +++ b/contrib/completions/bash/kubectl @@ -378,6 +378,7 @@ _kubectl_get() flags+=("--watch-only") flags+=("--alsologtostderr") flags+=("--api-version=") + flags+=("--as=") flags+=("--certificate-authority=") flags+=("--client-certificate=") flags+=("--client-key=") @@ -498,6 +499,7 @@ _kubectl_describe() two_word_flags+=("-l") flags+=("--alsologtostderr") flags+=("--api-version=") + flags+=("--as=") flags+=("--certificate-authority=") flags+=("--client-certificate=") flags+=("--client-key=") @@ -618,6 +620,7 @@ _kubectl_create_namespace() flags+=("--validate") flags+=("--alsologtostderr") flags+=("--api-version=") + flags+=("--as=") flags+=("--certificate-authority=") flags+=("--client-certificate=") flags+=("--client-key=") @@ -686,6 +689,7 @@ _kubectl_create_secret_docker-registry() flags+=("--validate") flags+=("--alsologtostderr") flags+=("--api-version=") + flags+=("--as=") flags+=("--certificate-authority=") flags+=("--client-certificate=") flags+=("--client-key=") @@ -755,6 +759,7 @@ _kubectl_create_secret_generic() flags+=("--validate") flags+=("--alsologtostderr") flags+=("--api-version=") + flags+=("--as=") flags+=("--certificate-authority=") flags+=("--client-certificate=") flags+=("--client-key=") @@ -799,6 +804,7 @@ _kubectl_create_secret() flags+=("--alsologtostderr") flags+=("--api-version=") + flags+=("--as=") flags+=("--certificate-authority=") flags+=("--client-certificate=") flags+=("--client-key=") @@ -864,6 +870,7 @@ _kubectl_create_configmap() flags+=("--validate") flags+=("--alsologtostderr") flags+=("--api-version=") + flags+=("--as=") flags+=("--certificate-authority=") flags+=("--client-certificate=") flags+=("--client-key=") @@ -928,6 +935,7 @@ _kubectl_create_serviceaccount() flags+=("--validate") flags+=("--alsologtostderr") flags+=("--api-version=") + flags+=("--as=") flags+=("--certificate-authority=") flags+=("--client-certificate=") flags+=("--client-key=") @@ -991,6 +999,7 @@ _kubectl_create() flags+=("--validate") flags+=("--alsologtostderr") flags+=("--api-version=") + flags+=("--as=") flags+=("--certificate-authority=") flags+=("--client-certificate=") flags+=("--client-key=") @@ -1056,6 +1065,7 @@ _kubectl_replace() flags+=("--validate") flags+=("--alsologtostderr") flags+=("--api-version=") + flags+=("--as=") flags+=("--certificate-authority=") flags+=("--client-certificate=") flags+=("--client-key=") @@ -1115,6 +1125,7 @@ _kubectl_patch() flags+=("--type=") flags+=("--alsologtostderr") flags+=("--api-version=") + flags+=("--as=") flags+=("--certificate-authority=") flags+=("--client-certificate=") flags+=("--client-key=") @@ -1177,6 +1188,7 @@ _kubectl_delete() flags+=("--timeout=") flags+=("--alsologtostderr") flags+=("--api-version=") + flags+=("--as=") flags+=("--certificate-authority=") flags+=("--client-certificate=") flags+=("--client-key=") @@ -1301,6 +1313,7 @@ _kubectl_edit() flags+=("--windows-line-endings") flags+=("--alsologtostderr") flags+=("--api-version=") + flags+=("--as=") flags+=("--certificate-authority=") flags+=("--client-certificate=") flags+=("--client-key=") @@ -1359,6 +1372,7 @@ _kubectl_apply() flags+=("--validate") flags+=("--alsologtostderr") flags+=("--api-version=") + flags+=("--as=") flags+=("--certificate-authority=") flags+=("--client-certificate=") flags+=("--client-key=") @@ -1403,6 +1417,7 @@ _kubectl_namespace() flags+=("--alsologtostderr") flags+=("--api-version=") + flags+=("--as=") flags+=("--certificate-authority=") flags+=("--client-certificate=") flags+=("--client-key=") @@ -1458,6 +1473,7 @@ _kubectl_logs() flags+=("--timestamps") flags+=("--alsologtostderr") flags+=("--api-version=") + flags+=("--as=") flags+=("--certificate-authority=") flags+=("--client-certificate=") flags+=("--client-key=") @@ -1533,6 +1549,7 @@ _kubectl_rolling-update() flags+=("--validate") flags+=("--alsologtostderr") flags+=("--api-version=") + flags+=("--as=") flags+=("--certificate-authority=") flags+=("--client-certificate=") flags+=("--client-key=") @@ -1594,6 +1611,7 @@ _kubectl_scale() flags+=("--timeout=") flags+=("--alsologtostderr") flags+=("--api-version=") + flags+=("--as=") flags+=("--certificate-authority=") flags+=("--client-certificate=") flags+=("--client-key=") @@ -1637,6 +1655,7 @@ _kubectl_cordon() flags+=("--alsologtostderr") flags+=("--api-version=") + flags+=("--as=") flags+=("--certificate-authority=") flags+=("--client-certificate=") flags+=("--client-key=") @@ -1682,6 +1701,7 @@ _kubectl_drain() flags+=("--ignore-daemonsets") flags+=("--alsologtostderr") flags+=("--api-version=") + flags+=("--as=") flags+=("--certificate-authority=") flags+=("--client-certificate=") flags+=("--client-key=") @@ -1724,6 +1744,7 @@ _kubectl_uncordon() flags+=("--alsologtostderr") flags+=("--api-version=") + flags+=("--as=") flags+=("--certificate-authority=") flags+=("--client-certificate=") flags+=("--client-key=") @@ -1772,6 +1793,7 @@ _kubectl_attach() flags+=("-t") flags+=("--alsologtostderr") flags+=("--api-version=") + flags+=("--as=") flags+=("--certificate-authority=") flags+=("--client-certificate=") flags+=("--client-key=") @@ -1822,6 +1844,7 @@ _kubectl_exec() flags+=("-t") flags+=("--alsologtostderr") flags+=("--api-version=") + flags+=("--as=") flags+=("--certificate-authority=") flags+=("--client-certificate=") flags+=("--client-key=") @@ -1866,6 +1889,7 @@ _kubectl_port-forward() two_word_flags+=("-p") flags+=("--alsologtostderr") flags+=("--api-version=") + flags+=("--as=") flags+=("--certificate-authority=") flags+=("--client-certificate=") flags+=("--client-key=") @@ -1923,6 +1947,7 @@ _kubectl_proxy() two_word_flags+=("-P") flags+=("--alsologtostderr") flags+=("--api-version=") + flags+=("--as=") flags+=("--certificate-authority=") flags+=("--client-certificate=") flags+=("--client-key=") @@ -2006,6 +2031,7 @@ _kubectl_run() flags+=("--tty") flags+=("--alsologtostderr") flags+=("--api-version=") + flags+=("--as=") flags+=("--certificate-authority=") flags+=("--client-certificate=") flags+=("--client-key=") @@ -2089,6 +2115,7 @@ _kubectl_expose() flags+=("--type=") flags+=("--alsologtostderr") flags+=("--api-version=") + flags+=("--as=") flags+=("--certificate-authority=") flags+=("--client-certificate=") flags+=("--client-key=") @@ -2162,6 +2189,7 @@ _kubectl_autoscale() flags_completion+=("_filedir") flags+=("--alsologtostderr") flags+=("--api-version=") + flags+=("--as=") flags+=("--certificate-authority=") flags+=("--client-certificate=") flags+=("--client-key=") @@ -2214,6 +2242,7 @@ _kubectl_rollout_history() flags+=("--revision=") flags+=("--alsologtostderr") flags+=("--api-version=") + flags+=("--as=") flags+=("--certificate-authority=") flags+=("--client-certificate=") flags+=("--client-key=") @@ -2264,6 +2293,7 @@ _kubectl_rollout_pause() flags+=("-R") flags+=("--alsologtostderr") flags+=("--api-version=") + flags+=("--as=") flags+=("--certificate-authority=") flags+=("--client-certificate=") flags+=("--client-key=") @@ -2314,6 +2344,7 @@ _kubectl_rollout_resume() flags+=("-R") flags+=("--alsologtostderr") flags+=("--api-version=") + flags+=("--as=") flags+=("--certificate-authority=") flags+=("--client-certificate=") flags+=("--client-key=") @@ -2365,6 +2396,7 @@ _kubectl_rollout_undo() flags+=("--to-revision=") flags+=("--alsologtostderr") flags+=("--api-version=") + flags+=("--as=") flags+=("--certificate-authority=") flags+=("--client-certificate=") flags+=("--client-key=") @@ -2411,6 +2443,7 @@ _kubectl_rollout() flags+=("--alsologtostderr") flags+=("--api-version=") + flags+=("--as=") flags+=("--certificate-authority=") flags+=("--client-certificate=") flags+=("--client-key=") @@ -2483,6 +2516,7 @@ _kubectl_label() flags_completion+=("_filedir") flags+=("--alsologtostderr") flags+=("--api-version=") + flags+=("--as=") flags+=("--certificate-authority=") flags+=("--client-certificate=") flags+=("--client-key=") @@ -2621,6 +2655,7 @@ _kubectl_annotate() flags_completion+=("_filedir") flags+=("--alsologtostderr") flags+=("--api-version=") + flags+=("--as=") flags+=("--certificate-authority=") flags+=("--client-certificate=") flags+=("--client-key=") @@ -2681,6 +2716,7 @@ _kubectl_config_view() flags_completion+=("_filedir") flags+=("--alsologtostderr") flags+=("--api-version=") + flags+=("--as=") flags+=("--certificate-authority=") flags+=("--client-certificate=") flags+=("--client-key=") @@ -2729,6 +2765,7 @@ _kubectl_config_set-cluster() flags+=("--insecure-skip-tls-verify=") flags+=("--server=") flags+=("--alsologtostderr") + flags+=("--as=") flags+=("--client-certificate=") flags+=("--client-key=") flags+=("--cluster=") @@ -2777,6 +2814,7 @@ _kubectl_config_set-credentials() flags+=("--username=") flags+=("--alsologtostderr") flags+=("--api-version=") + flags+=("--as=") flags+=("--certificate-authority=") flags+=("--cluster=") flags+=("--context=") @@ -2817,6 +2855,7 @@ _kubectl_config_set-context() flags+=("--user=") flags+=("--alsologtostderr") flags+=("--api-version=") + flags+=("--as=") flags+=("--certificate-authority=") flags+=("--client-certificate=") flags+=("--client-key=") @@ -2854,6 +2893,7 @@ _kubectl_config_set() flags+=("--alsologtostderr") flags+=("--api-version=") + flags+=("--as=") flags+=("--certificate-authority=") flags+=("--client-certificate=") flags+=("--client-key=") @@ -2896,6 +2936,7 @@ _kubectl_config_unset() flags+=("--alsologtostderr") flags+=("--api-version=") + flags+=("--as=") flags+=("--certificate-authority=") flags+=("--client-certificate=") flags+=("--client-key=") @@ -2938,6 +2979,7 @@ _kubectl_config_current-context() flags+=("--alsologtostderr") flags+=("--api-version=") + flags+=("--as=") flags+=("--certificate-authority=") flags+=("--client-certificate=") flags+=("--client-key=") @@ -2980,6 +3022,7 @@ _kubectl_config_use-context() flags+=("--alsologtostderr") flags+=("--api-version=") + flags+=("--as=") flags+=("--certificate-authority=") flags+=("--client-certificate=") flags+=("--client-key=") @@ -3031,6 +3074,7 @@ _kubectl_config() flags+=("--kubeconfig=") flags+=("--alsologtostderr") flags+=("--api-version=") + flags+=("--as=") flags+=("--certificate-authority=") flags+=("--client-certificate=") flags+=("--client-key=") @@ -3073,6 +3117,7 @@ _kubectl_cluster-info() flags+=("--include-extended-apis") flags+=("--alsologtostderr") flags+=("--api-version=") + flags+=("--as=") flags+=("--certificate-authority=") flags+=("--client-certificate=") flags+=("--client-key=") @@ -3115,6 +3160,7 @@ _kubectl_api-versions() flags+=("--alsologtostderr") flags+=("--api-version=") + flags+=("--as=") flags+=("--certificate-authority=") flags+=("--client-certificate=") flags+=("--client-key=") @@ -3159,6 +3205,7 @@ _kubectl_version() flags+=("-c") flags+=("--alsologtostderr") flags+=("--api-version=") + flags+=("--as=") flags+=("--certificate-authority=") flags+=("--client-certificate=") flags+=("--client-key=") @@ -3203,6 +3250,7 @@ _kubectl_explain() flags+=("--recursive") flags+=("--alsologtostderr") flags+=("--api-version=") + flags+=("--as=") flags+=("--certificate-authority=") flags+=("--client-certificate=") flags+=("--client-key=") @@ -3273,6 +3321,7 @@ _kubectl_convert() flags+=("--validate") flags+=("--alsologtostderr") flags+=("--api-version=") + flags+=("--as=") flags+=("--certificate-authority=") flags+=("--client-certificate=") flags+=("--client-key=") @@ -3348,6 +3397,7 @@ _kubectl() flags+=("--alsologtostderr") flags+=("--api-version=") + flags+=("--as=") flags+=("--certificate-authority=") flags+=("--client-certificate=") flags+=("--client-key=") diff --git a/docs/man/man1/kubectl-annotate.1 b/docs/man/man1/kubectl-annotate.1 index 0cf2dd3d05598..a5dfcecc14b45 100644 --- a/docs/man/man1/kubectl-annotate.1 +++ b/docs/man/man1/kubectl-annotate.1 @@ -102,6 +102,10 @@ horizontalpodautoscalers (hpa), resourcequotas (quota) or secrets. \fB\-\-api\-version\fP="" DEPRECATED: The API version to use when talking to the server +.PP +\fB\-\-as\fP="" + Username to impersonate for the operation. + .PP \fB\-\-certificate\-authority\fP="" Path to a cert. file for the certificate authority. diff --git a/docs/man/man1/kubectl-api-versions.1 b/docs/man/man1/kubectl-api-versions.1 index 1d86ea64ff2a7..3e1b16336a596 100644 --- a/docs/man/man1/kubectl-api-versions.1 +++ b/docs/man/man1/kubectl-api-versions.1 @@ -25,6 +25,10 @@ Print the supported API versions on the server, in the form of "group/version". \fB\-\-api\-version\fP="" DEPRECATED: The API version to use when talking to the server +.PP +\fB\-\-as\fP="" + Username to impersonate for the operation. + .PP \fB\-\-certificate\-authority\fP="" Path to a cert. file for the certificate authority. diff --git a/docs/man/man1/kubectl-apply.1 b/docs/man/man1/kubectl-apply.1 index 78dba1e950f33..e2b66d17715b6 100644 --- a/docs/man/man1/kubectl-apply.1 +++ b/docs/man/man1/kubectl-apply.1 @@ -59,6 +59,10 @@ JSON and YAML formats are accepted. \fB\-\-api\-version\fP="" DEPRECATED: The API version to use when talking to the server +.PP +\fB\-\-as\fP="" + Username to impersonate for the operation. + .PP \fB\-\-certificate\-authority\fP="" Path to a cert. file for the certificate authority. diff --git a/docs/man/man1/kubectl-attach.1 b/docs/man/man1/kubectl-attach.1 index 60e8c5444fbf9..5d76ef54992f2 100644 --- a/docs/man/man1/kubectl-attach.1 +++ b/docs/man/man1/kubectl-attach.1 @@ -39,6 +39,10 @@ Attach to a process that is already running inside an existing container. \fB\-\-api\-version\fP="" DEPRECATED: The API version to use when talking to the server +.PP +\fB\-\-as\fP="" + Username to impersonate for the operation. + .PP \fB\-\-certificate\-authority\fP="" Path to a cert. file for the certificate authority. diff --git a/docs/man/man1/kubectl-autoscale.1 b/docs/man/man1/kubectl-autoscale.1 index 67373b6b406ea..ed56eef87217b 100644 --- a/docs/man/man1/kubectl-autoscale.1 +++ b/docs/man/man1/kubectl-autoscale.1 @@ -106,6 +106,10 @@ An autoscaler can automatically increase or decrease number of pods deployed wit \fB\-\-api\-version\fP="" DEPRECATED: The API version to use when talking to the server +.PP +\fB\-\-as\fP="" + Username to impersonate for the operation. + .PP \fB\-\-certificate\-authority\fP="" Path to a cert. file for the certificate authority. diff --git a/docs/man/man1/kubectl-cluster-info.1 b/docs/man/man1/kubectl-cluster-info.1 index 9a6cfca3f99c2..fb63196cb08a3 100644 --- a/docs/man/man1/kubectl-cluster-info.1 +++ b/docs/man/man1/kubectl-cluster-info.1 @@ -31,6 +31,10 @@ Display addresses of the master and services with label kubernetes.io/cluster\-s \fB\-\-api\-version\fP="" DEPRECATED: The API version to use when talking to the server +.PP +\fB\-\-as\fP="" + Username to impersonate for the operation. + .PP \fB\-\-certificate\-authority\fP="" Path to a cert. file for the certificate authority. diff --git a/docs/man/man1/kubectl-config-current-context.1 b/docs/man/man1/kubectl-config-current-context.1 index c45249ad1cd82..77ae5c5136b76 100644 --- a/docs/man/man1/kubectl-config-current-context.1 +++ b/docs/man/man1/kubectl-config-current-context.1 @@ -25,6 +25,10 @@ Displays the current\-context \fB\-\-api\-version\fP="" DEPRECATED: The API version to use when talking to the server +.PP +\fB\-\-as\fP="" + Username to impersonate for the operation. + .PP \fB\-\-certificate\-authority\fP="" Path to a cert. file for the certificate authority. diff --git a/docs/man/man1/kubectl-config-set-cluster.1 b/docs/man/man1/kubectl-config-set-cluster.1 index 521d95cf13a11..3fb57189cb36f 100644 --- a/docs/man/man1/kubectl-config-set-cluster.1 +++ b/docs/man/man1/kubectl-config-set-cluster.1 @@ -44,6 +44,10 @@ Specifying a name that already exists will merge new fields on top of existing v \fB\-\-alsologtostderr\fP=false log to standard error as well as files +.PP +\fB\-\-as\fP="" + Username to impersonate for the operation. + .PP \fB\-\-client\-certificate\fP="" Path to a client certificate file for TLS. diff --git a/docs/man/man1/kubectl-config-set-context.1 b/docs/man/man1/kubectl-config-set-context.1 index 5cb6ef76fc557..6e5e6402df7b0 100644 --- a/docs/man/man1/kubectl-config-set-context.1 +++ b/docs/man/man1/kubectl-config-set-context.1 @@ -40,6 +40,10 @@ Specifying a name that already exists will merge new fields on top of existing v \fB\-\-api\-version\fP="" DEPRECATED: The API version to use when talking to the server +.PP +\fB\-\-as\fP="" + Username to impersonate for the operation. + .PP \fB\-\-certificate\-authority\fP="" Path to a cert. file for the certificate authority. diff --git a/docs/man/man1/kubectl-config-set-credentials.1 b/docs/man/man1/kubectl-config-set-credentials.1 index 3a1c5f333b6cb..698da03700f32 100644 --- a/docs/man/man1/kubectl-config-set-credentials.1 +++ b/docs/man/man1/kubectl-config-set-credentials.1 @@ -67,6 +67,10 @@ Bearer token and basic auth are mutually exclusive. \fB\-\-api\-version\fP="" DEPRECATED: The API version to use when talking to the server +.PP +\fB\-\-as\fP="" + Username to impersonate for the operation. + .PP \fB\-\-certificate\-authority\fP="" Path to a cert. file for the certificate authority. diff --git a/docs/man/man1/kubectl-config-set.1 b/docs/man/man1/kubectl-config-set.1 index 4e70057921558..4b88a433f4b3c 100644 --- a/docs/man/man1/kubectl-config-set.1 +++ b/docs/man/man1/kubectl-config-set.1 @@ -27,6 +27,10 @@ PROPERTY\_VALUE is the new value you wish to set. \fB\-\-api\-version\fP="" DEPRECATED: The API version to use when talking to the server +.PP +\fB\-\-as\fP="" + Username to impersonate for the operation. + .PP \fB\-\-certificate\-authority\fP="" Path to a cert. file for the certificate authority. diff --git a/docs/man/man1/kubectl-config-unset.1 b/docs/man/man1/kubectl-config-unset.1 index acea736be9e3a..2a73d2c496d3a 100644 --- a/docs/man/man1/kubectl-config-unset.1 +++ b/docs/man/man1/kubectl-config-unset.1 @@ -26,6 +26,10 @@ PROPERTY\_NAME is a dot delimited name where each token represents either a attr \fB\-\-api\-version\fP="" DEPRECATED: The API version to use when talking to the server +.PP +\fB\-\-as\fP="" + Username to impersonate for the operation. + .PP \fB\-\-certificate\-authority\fP="" Path to a cert. file for the certificate authority. diff --git a/docs/man/man1/kubectl-config-use-context.1 b/docs/man/man1/kubectl-config-use-context.1 index 4e4b87eb850a0..3a23cdebe999e 100644 --- a/docs/man/man1/kubectl-config-use-context.1 +++ b/docs/man/man1/kubectl-config-use-context.1 @@ -25,6 +25,10 @@ Sets the current\-context in a kubeconfig file \fB\-\-api\-version\fP="" DEPRECATED: The API version to use when talking to the server +.PP +\fB\-\-as\fP="" + Username to impersonate for the operation. + .PP \fB\-\-certificate\-authority\fP="" Path to a cert. file for the certificate authority. diff --git a/docs/man/man1/kubectl-config-view.1 b/docs/man/man1/kubectl-config-view.1 index f7017d373a3b0..851cc9b3af075 100644 --- a/docs/man/man1/kubectl-config-view.1 +++ b/docs/man/man1/kubectl-config-view.1 @@ -77,6 +77,10 @@ You can use \-\-output jsonpath={...} to extract specific values using a jsonpat \fB\-\-api\-version\fP="" DEPRECATED: The API version to use when talking to the server +.PP +\fB\-\-as\fP="" + Username to impersonate for the operation. + .PP \fB\-\-certificate\-authority\fP="" Path to a cert. file for the certificate authority. diff --git a/docs/man/man1/kubectl-config.1 b/docs/man/man1/kubectl-config.1 index 1375dbf935ec2..e15c9dc0c4747 100644 --- a/docs/man/man1/kubectl-config.1 +++ b/docs/man/man1/kubectl-config.1 @@ -37,6 +37,10 @@ The loading order follows these rules: \fB\-\-api\-version\fP="" DEPRECATED: The API version to use when talking to the server +.PP +\fB\-\-as\fP="" + Username to impersonate for the operation. + .PP \fB\-\-certificate\-authority\fP="" Path to a cert. file for the certificate authority. diff --git a/docs/man/man1/kubectl-convert.1 b/docs/man/man1/kubectl-convert.1 index 2988533d17be0..ed6a00de22362 100644 --- a/docs/man/man1/kubectl-convert.1 +++ b/docs/man/man1/kubectl-convert.1 @@ -92,6 +92,10 @@ to change to output destination. \fB\-\-api\-version\fP="" DEPRECATED: The API version to use when talking to the server +.PP +\fB\-\-as\fP="" + Username to impersonate for the operation. + .PP \fB\-\-certificate\-authority\fP="" Path to a cert. file for the certificate authority. diff --git a/docs/man/man1/kubectl-cordon.1 b/docs/man/man1/kubectl-cordon.1 index 1bccda74a22ca..f07b52515e327 100644 --- a/docs/man/man1/kubectl-cordon.1 +++ b/docs/man/man1/kubectl-cordon.1 @@ -25,6 +25,10 @@ Mark node as unschedulable. \fB\-\-api\-version\fP="" DEPRECATED: The API version to use when talking to the server +.PP +\fB\-\-as\fP="" + Username to impersonate for the operation. + .PP \fB\-\-certificate\-authority\fP="" Path to a cert. file for the certificate authority. diff --git a/docs/man/man1/kubectl-create-configmap.1 b/docs/man/man1/kubectl-create-configmap.1 index 148a904ab7c15..45b48a90516a7 100644 --- a/docs/man/man1/kubectl-create-configmap.1 +++ b/docs/man/man1/kubectl-create-configmap.1 @@ -98,6 +98,10 @@ symlinks, devices, pipes, etc). \fB\-\-api\-version\fP="" DEPRECATED: The API version to use when talking to the server +.PP +\fB\-\-as\fP="" + Username to impersonate for the operation. + .PP \fB\-\-certificate\-authority\fP="" Path to a cert. file for the certificate authority. diff --git a/docs/man/man1/kubectl-create-namespace.1 b/docs/man/man1/kubectl-create-namespace.1 index b9a9e7365e2e5..8049b808354cf 100644 --- a/docs/man/man1/kubectl-create-namespace.1 +++ b/docs/man/man1/kubectl-create-namespace.1 @@ -78,6 +78,10 @@ Create a namespace with the specified name. \fB\-\-api\-version\fP="" DEPRECATED: The API version to use when talking to the server +.PP +\fB\-\-as\fP="" + Username to impersonate for the operation. + .PP \fB\-\-certificate\-authority\fP="" Path to a cert. file for the certificate authority. diff --git a/docs/man/man1/kubectl-create-secret-docker-registry.1 b/docs/man/man1/kubectl-create-secret-docker-registry.1 index 2bbd0379fe931..32a94ee5fc6fe 100644 --- a/docs/man/man1/kubectl-create-secret-docker-registry.1 +++ b/docs/man/man1/kubectl-create-secret-docker-registry.1 @@ -113,6 +113,10 @@ by creating a dockercfg secret and attaching it to your service account. \fB\-\-api\-version\fP="" DEPRECATED: The API version to use when talking to the server +.PP +\fB\-\-as\fP="" + Username to impersonate for the operation. + .PP \fB\-\-certificate\-authority\fP="" Path to a cert. file for the certificate authority. diff --git a/docs/man/man1/kubectl-create-secret-generic.1 b/docs/man/man1/kubectl-create-secret-generic.1 index 5728f667bf484..ef69be387b9b1 100644 --- a/docs/man/man1/kubectl-create-secret-generic.1 +++ b/docs/man/man1/kubectl-create-secret-generic.1 @@ -102,6 +102,10 @@ symlinks, devices, pipes, etc). \fB\-\-api\-version\fP="" DEPRECATED: The API version to use when talking to the server +.PP +\fB\-\-as\fP="" + Username to impersonate for the operation. + .PP \fB\-\-certificate\-authority\fP="" Path to a cert. file for the certificate authority. diff --git a/docs/man/man1/kubectl-create-secret.1 b/docs/man/man1/kubectl-create-secret.1 index 3a5eb0352cea4..a353e3b7d675f 100644 --- a/docs/man/man1/kubectl-create-secret.1 +++ b/docs/man/man1/kubectl-create-secret.1 @@ -25,6 +25,10 @@ Create a secret using specified subcommand. \fB\-\-api\-version\fP="" DEPRECATED: The API version to use when talking to the server +.PP +\fB\-\-as\fP="" + Username to impersonate for the operation. + .PP \fB\-\-certificate\-authority\fP="" Path to a cert. file for the certificate authority. diff --git a/docs/man/man1/kubectl-create-serviceaccount.1 b/docs/man/man1/kubectl-create-serviceaccount.1 index 0edaa8bedc44f..c3473fc9cfabe 100644 --- a/docs/man/man1/kubectl-create-serviceaccount.1 +++ b/docs/man/man1/kubectl-create-serviceaccount.1 @@ -82,6 +82,10 @@ Create a service account with the specified name. \fB\-\-api\-version\fP="" DEPRECATED: The API version to use when talking to the server +.PP +\fB\-\-as\fP="" + Username to impersonate for the operation. + .PP \fB\-\-certificate\-authority\fP="" Path to a cert. file for the certificate authority. diff --git a/docs/man/man1/kubectl-create.1 b/docs/man/man1/kubectl-create.1 index f7f7c0cb10087..622df09c03e72 100644 --- a/docs/man/man1/kubectl-create.1 +++ b/docs/man/man1/kubectl-create.1 @@ -62,6 +62,10 @@ JSON and YAML formats are accepted. \fB\-\-api\-version\fP="" DEPRECATED: The API version to use when talking to the server +.PP +\fB\-\-as\fP="" + Username to impersonate for the operation. + .PP \fB\-\-certificate\-authority\fP="" Path to a cert. file for the certificate authority. diff --git a/docs/man/man1/kubectl-delete.1 b/docs/man/man1/kubectl-delete.1 index cafe6a591944c..25e178bcf8637 100644 --- a/docs/man/man1/kubectl-delete.1 +++ b/docs/man/man1/kubectl-delete.1 @@ -78,6 +78,10 @@ will be lost along with the rest of the resource. \fB\-\-api\-version\fP="" DEPRECATED: The API version to use when talking to the server +.PP +\fB\-\-as\fP="" + Username to impersonate for the operation. + .PP \fB\-\-certificate\-authority\fP="" Path to a cert. file for the certificate authority. diff --git a/docs/man/man1/kubectl-describe.1 b/docs/man/man1/kubectl-describe.1 index 0b860e03d35a6..0d18f9639a0c4 100644 --- a/docs/man/man1/kubectl-describe.1 +++ b/docs/man/man1/kubectl-describe.1 @@ -61,6 +61,10 @@ componentstatuses (cs), endpoints (ep), and secrets. \fB\-\-api\-version\fP="" DEPRECATED: The API version to use when talking to the server +.PP +\fB\-\-as\fP="" + Username to impersonate for the operation. + .PP \fB\-\-certificate\-authority\fP="" Path to a cert. file for the certificate authority. diff --git a/docs/man/man1/kubectl-drain.1 b/docs/man/man1/kubectl-drain.1 index 7e6112373fbb9..b14e17762dc30 100644 --- a/docs/man/man1/kubectl-drain.1 +++ b/docs/man/man1/kubectl-drain.1 @@ -53,6 +53,10 @@ will make the node schedulable again. \fB\-\-api\-version\fP="" DEPRECATED: The API version to use when talking to the server +.PP +\fB\-\-as\fP="" + Username to impersonate for the operation. + .PP \fB\-\-certificate\-authority\fP="" Path to a cert. file for the certificate authority. diff --git a/docs/man/man1/kubectl-edit.1 b/docs/man/man1/kubectl-edit.1 index 540e1801a9145..c6b49c6c7ea42 100644 --- a/docs/man/man1/kubectl-edit.1 +++ b/docs/man/man1/kubectl-edit.1 @@ -80,6 +80,10 @@ saved copy to include the latest resource version. \fB\-\-api\-version\fP="" DEPRECATED: The API version to use when talking to the server +.PP +\fB\-\-as\fP="" + Username to impersonate for the operation. + .PP \fB\-\-certificate\-authority\fP="" Path to a cert. file for the certificate authority. diff --git a/docs/man/man1/kubectl-exec.1 b/docs/man/man1/kubectl-exec.1 index 9c4dca84801ee..6504b0977374c 100644 --- a/docs/man/man1/kubectl-exec.1 +++ b/docs/man/man1/kubectl-exec.1 @@ -43,6 +43,10 @@ Execute a command in a container. \fB\-\-api\-version\fP="" DEPRECATED: The API version to use when talking to the server +.PP +\fB\-\-as\fP="" + Username to impersonate for the operation. + .PP \fB\-\-certificate\-authority\fP="" Path to a cert. file for the certificate authority. diff --git a/docs/man/man1/kubectl-explain.1 b/docs/man/man1/kubectl-explain.1 index 842bc6d1d4718..b35f681acbd5a 100644 --- a/docs/man/man1/kubectl-explain.1 +++ b/docs/man/man1/kubectl-explain.1 @@ -42,6 +42,10 @@ componentstatuses (cs), endpoints (ep), and secrets. \fB\-\-api\-version\fP="" DEPRECATED: The API version to use when talking to the server +.PP +\fB\-\-as\fP="" + Username to impersonate for the operation. + .PP \fB\-\-certificate\-authority\fP="" Path to a cert. file for the certificate authority. diff --git a/docs/man/man1/kubectl-expose.1 b/docs/man/man1/kubectl-expose.1 index 6c3a3df40bf20..f3274cbb1b0cb 100644 --- a/docs/man/man1/kubectl-expose.1 +++ b/docs/man/man1/kubectl-expose.1 @@ -142,6 +142,10 @@ labels are specified, the new service will re\-use the labels from the resource \fB\-\-api\-version\fP="" DEPRECATED: The API version to use when talking to the server +.PP +\fB\-\-as\fP="" + Username to impersonate for the operation. + .PP \fB\-\-certificate\-authority\fP="" Path to a cert. file for the certificate authority. diff --git a/docs/man/man1/kubectl-get.1 b/docs/man/man1/kubectl-get.1 index e089e8599af55..5a6f860c6e28c 100644 --- a/docs/man/man1/kubectl-get.1 +++ b/docs/man/man1/kubectl-get.1 @@ -105,6 +105,10 @@ of the \-\-template flag, you can filter the attributes of the fetched resource( \fB\-\-api\-version\fP="" DEPRECATED: The API version to use when talking to the server +.PP +\fB\-\-as\fP="" + Username to impersonate for the operation. + .PP \fB\-\-certificate\-authority\fP="" Path to a cert. file for the certificate authority. diff --git a/docs/man/man1/kubectl-label.1 b/docs/man/man1/kubectl-label.1 index 987ab698eb58d..2548e4835da79 100644 --- a/docs/man/man1/kubectl-label.1 +++ b/docs/man/man1/kubectl-label.1 @@ -99,6 +99,10 @@ If \-\-resource\-version is specified, then updates will use this resource versi \fB\-\-api\-version\fP="" DEPRECATED: The API version to use when talking to the server +.PP +\fB\-\-as\fP="" + Username to impersonate for the operation. + .PP \fB\-\-certificate\-authority\fP="" Path to a cert. file for the certificate authority. diff --git a/docs/man/man1/kubectl-logs.1 b/docs/man/man1/kubectl-logs.1 index e69b874cdc8d9..66092f70f162d 100644 --- a/docs/man/man1/kubectl-logs.1 +++ b/docs/man/man1/kubectl-logs.1 @@ -67,6 +67,10 @@ Print the logs for a container in a pod. If the pod has only one container, the \fB\-\-api\-version\fP="" DEPRECATED: The API version to use when talking to the server +.PP +\fB\-\-as\fP="" + Username to impersonate for the operation. + .PP \fB\-\-certificate\-authority\fP="" Path to a cert. file for the certificate authority. diff --git a/docs/man/man1/kubectl-namespace.1 b/docs/man/man1/kubectl-namespace.1 index 8e67defa63054..3ec8507a9d744 100644 --- a/docs/man/man1/kubectl-namespace.1 +++ b/docs/man/man1/kubectl-namespace.1 @@ -28,6 +28,10 @@ namespace has been superseded by the context.namespace field of .kubeconfig file \fB\-\-api\-version\fP="" DEPRECATED: The API version to use when talking to the server +.PP +\fB\-\-as\fP="" + Username to impersonate for the operation. + .PP \fB\-\-certificate\-authority\fP="" Path to a cert. file for the certificate authority. diff --git a/docs/man/man1/kubectl-patch.1 b/docs/man/man1/kubectl-patch.1 index 8151868fc60a0..1a53598c85a42 100644 --- a/docs/man/man1/kubectl-patch.1 +++ b/docs/man/man1/kubectl-patch.1 @@ -62,6 +62,10 @@ Please refer to the models in \fB\-\-api\-version\fP="" DEPRECATED: The API version to use when talking to the server +.PP +\fB\-\-as\fP="" + Username to impersonate for the operation. + .PP \fB\-\-certificate\-authority\fP="" Path to a cert. file for the certificate authority. diff --git a/docs/man/man1/kubectl-port-forward.1 b/docs/man/man1/kubectl-port-forward.1 index 665615f4c8440..d4149bad7eb23 100644 --- a/docs/man/man1/kubectl-port-forward.1 +++ b/docs/man/man1/kubectl-port-forward.1 @@ -31,6 +31,10 @@ Forward one or more local ports to a pod. \fB\-\-api\-version\fP="" DEPRECATED: The API version to use when talking to the server +.PP +\fB\-\-as\fP="" + Username to impersonate for the operation. + .PP \fB\-\-certificate\-authority\fP="" Path to a cert. file for the certificate authority. diff --git a/docs/man/man1/kubectl-proxy.1 b/docs/man/man1/kubectl-proxy.1 index 3b20d0f1146c6..db50532edcbb6 100644 --- a/docs/man/man1/kubectl-proxy.1 +++ b/docs/man/man1/kubectl-proxy.1 @@ -92,6 +92,10 @@ The above lets you 'curl localhost:8001/custom/api/v1/pods' \fB\-\-api\-version\fP="" DEPRECATED: The API version to use when talking to the server +.PP +\fB\-\-as\fP="" + Username to impersonate for the operation. + .PP \fB\-\-certificate\-authority\fP="" Path to a cert. file for the certificate authority. diff --git a/docs/man/man1/kubectl-replace.1 b/docs/man/man1/kubectl-replace.1 index c2534e02d5d76..48c8df1e5fcb4 100644 --- a/docs/man/man1/kubectl-replace.1 +++ b/docs/man/man1/kubectl-replace.1 @@ -84,6 +84,10 @@ Please refer to the models in \fB\-\-api\-version\fP="" DEPRECATED: The API version to use when talking to the server +.PP +\fB\-\-as\fP="" + Username to impersonate for the operation. + .PP \fB\-\-certificate\-authority\fP="" Path to a cert. file for the certificate authority. diff --git a/docs/man/man1/kubectl-rolling-update.1 b/docs/man/man1/kubectl-rolling-update.1 index d44d723dfe6f4..e99bdcdcbf87a 100644 --- a/docs/man/man1/kubectl-rolling-update.1 +++ b/docs/man/man1/kubectl-rolling-update.1 @@ -111,6 +111,10 @@ existing replication controller and overwrite at least one (common) label in its \fB\-\-api\-version\fP="" DEPRECATED: The API version to use when talking to the server +.PP +\fB\-\-as\fP="" + Username to impersonate for the operation. + .PP \fB\-\-certificate\-authority\fP="" Path to a cert. file for the certificate authority. diff --git a/docs/man/man1/kubectl-rollout-history.1 b/docs/man/man1/kubectl-rollout-history.1 index f776516ab1f5a..7f35dc9f8e314 100644 --- a/docs/man/man1/kubectl-rollout-history.1 +++ b/docs/man/man1/kubectl-rollout-history.1 @@ -39,6 +39,10 @@ View previous rollout revisions and configurations. \fB\-\-api\-version\fP="" DEPRECATED: The API version to use when talking to the server +.PP +\fB\-\-as\fP="" + Username to impersonate for the operation. + .PP \fB\-\-certificate\-authority\fP="" Path to a cert. file for the certificate authority. diff --git a/docs/man/man1/kubectl-rollout-pause.1 b/docs/man/man1/kubectl-rollout-pause.1 index b97555a05d20e..7b11b89f558d0 100644 --- a/docs/man/man1/kubectl-rollout-pause.1 +++ b/docs/man/man1/kubectl-rollout-pause.1 @@ -40,6 +40,10 @@ Currently only deployments support being paused. \fB\-\-api\-version\fP="" DEPRECATED: The API version to use when talking to the server +.PP +\fB\-\-as\fP="" + Username to impersonate for the operation. + .PP \fB\-\-certificate\-authority\fP="" Path to a cert. file for the certificate authority. diff --git a/docs/man/man1/kubectl-rollout-resume.1 b/docs/man/man1/kubectl-rollout-resume.1 index 9a7868a0b66ef..796ba295d076a 100644 --- a/docs/man/man1/kubectl-rollout-resume.1 +++ b/docs/man/man1/kubectl-rollout-resume.1 @@ -40,6 +40,10 @@ Currently only deployments support being resumed. \fB\-\-api\-version\fP="" DEPRECATED: The API version to use when talking to the server +.PP +\fB\-\-as\fP="" + Username to impersonate for the operation. + .PP \fB\-\-certificate\-authority\fP="" Path to a cert. file for the certificate authority. diff --git a/docs/man/man1/kubectl-rollout-undo.1 b/docs/man/man1/kubectl-rollout-undo.1 index 40317a8d290db..db2a7924b980e 100644 --- a/docs/man/man1/kubectl-rollout-undo.1 +++ b/docs/man/man1/kubectl-rollout-undo.1 @@ -39,6 +39,10 @@ Rollback to a previous rollout. \fB\-\-api\-version\fP="" DEPRECATED: The API version to use when talking to the server +.PP +\fB\-\-as\fP="" + Username to impersonate for the operation. + .PP \fB\-\-certificate\-authority\fP="" Path to a cert. file for the certificate authority. diff --git a/docs/man/man1/kubectl-rollout.1 b/docs/man/man1/kubectl-rollout.1 index f2e8eb7a88cd2..ead8b84d0312b 100644 --- a/docs/man/man1/kubectl-rollout.1 +++ b/docs/man/man1/kubectl-rollout.1 @@ -25,6 +25,10 @@ Manages a deployment using subcommands like "kubectl rollout undo deployment/abc \fB\-\-api\-version\fP="" DEPRECATED: The API version to use when talking to the server +.PP +\fB\-\-as\fP="" + Username to impersonate for the operation. + .PP \fB\-\-certificate\-authority\fP="" Path to a cert. file for the certificate authority. diff --git a/docs/man/man1/kubectl-run.1 b/docs/man/man1/kubectl-run.1 index b8d92dcce40e0..2b2664d447c13 100644 --- a/docs/man/man1/kubectl-run.1 +++ b/docs/man/man1/kubectl-run.1 @@ -155,6 +155,10 @@ Creates a deployment or job to manage the created container(s). \fB\-\-api\-version\fP="" DEPRECATED: The API version to use when talking to the server +.PP +\fB\-\-as\fP="" + Username to impersonate for the operation. + .PP \fB\-\-certificate\-authority\fP="" Path to a cert. file for the certificate authority. diff --git a/docs/man/man1/kubectl-scale.1 b/docs/man/man1/kubectl-scale.1 index 2dc35893d8a35..d7d0fb2d983bc 100644 --- a/docs/man/man1/kubectl-scale.1 +++ b/docs/man/man1/kubectl-scale.1 @@ -69,6 +69,10 @@ scale is sent to the server. \fB\-\-api\-version\fP="" DEPRECATED: The API version to use when talking to the server +.PP +\fB\-\-as\fP="" + Username to impersonate for the operation. + .PP \fB\-\-certificate\-authority\fP="" Path to a cert. file for the certificate authority. diff --git a/docs/man/man1/kubectl-stop.1 b/docs/man/man1/kubectl-stop.1 index 8e560c757d8e0..a5407fd82ddd4 100644 --- a/docs/man/man1/kubectl-stop.1 +++ b/docs/man/man1/kubectl-stop.1 @@ -71,6 +71,10 @@ If the resource is scalable it will be scaled to 0 before deletion. \fB\-\-api\-version\fP="" DEPRECATED: The API version to use when talking to the server +.PP +\fB\-\-as\fP="" + Username to impersonate for the operation. + .PP \fB\-\-certificate\-authority\fP="" Path to a cert. file for the certificate authority. diff --git a/docs/man/man1/kubectl-uncordon.1 b/docs/man/man1/kubectl-uncordon.1 index 1edac1922fd4a..f43355596ed16 100644 --- a/docs/man/man1/kubectl-uncordon.1 +++ b/docs/man/man1/kubectl-uncordon.1 @@ -25,6 +25,10 @@ Mark node as schedulable. \fB\-\-api\-version\fP="" DEPRECATED: The API version to use when talking to the server +.PP +\fB\-\-as\fP="" + Username to impersonate for the operation. + .PP \fB\-\-certificate\-authority\fP="" Path to a cert. file for the certificate authority. diff --git a/docs/man/man1/kubectl-version.1 b/docs/man/man1/kubectl-version.1 index f1e49ec22521c..87323f5115154 100644 --- a/docs/man/man1/kubectl-version.1 +++ b/docs/man/man1/kubectl-version.1 @@ -31,6 +31,10 @@ Print the client and server version information. \fB\-\-api\-version\fP="" DEPRECATED: The API version to use when talking to the server +.PP +\fB\-\-as\fP="" + Username to impersonate for the operation. + .PP \fB\-\-certificate\-authority\fP="" Path to a cert. file for the certificate authority. diff --git a/docs/man/man1/kubectl.1 b/docs/man/man1/kubectl.1 index c887f007e23c1..51e1b32665ddc 100644 --- a/docs/man/man1/kubectl.1 +++ b/docs/man/man1/kubectl.1 @@ -29,6 +29,10 @@ Find more information at \fB\-\-api\-version\fP="" DEPRECATED: The API version to use when talking to the server +.PP +\fB\-\-as\fP="" + Username to impersonate for the operation. + .PP \fB\-\-certificate\-authority\fP="" Path to a cert. file for the certificate authority. diff --git a/docs/user-guide/kubectl/kubectl.md b/docs/user-guide/kubectl/kubectl.md index 1785efad5d5e9..5699b32aed5ac 100644 --- a/docs/user-guide/kubectl/kubectl.md +++ b/docs/user-guide/kubectl/kubectl.md @@ -51,6 +51,7 @@ kubectl ``` --alsologtostderr[=false]: log to standard error as well as files + --as="": Username to impersonate for the operation. --certificate-authority="": Path to a cert. file for the certificate authority. --client-certificate="": Path to a client certificate file for TLS. --client-key="": Path to a client key file for TLS. @@ -108,7 +109,7 @@ kubectl * [kubectl uncordon](kubectl_uncordon.md) - Mark node as schedulable * [kubectl version](kubectl_version.md) - Print the client and server version information. -###### Auto generated by spf13/cobra on 25-Mar-2016 +###### Auto generated by spf13/cobra on 5-Apr-2016 [![Analytics](https://kubernetes-site.appspot.com/UA-36037335-10/GitHub/docs/user-guide/kubectl/kubectl.md?pixel)]() diff --git a/docs/user-guide/kubectl/kubectl_annotate.md b/docs/user-guide/kubectl/kubectl_annotate.md index 31398b923599c..a41560157b846 100644 --- a/docs/user-guide/kubectl/kubectl_annotate.md +++ b/docs/user-guide/kubectl/kubectl_annotate.md @@ -103,6 +103,7 @@ kubectl annotate pods foo description- ``` --alsologtostderr[=false]: log to standard error as well as files + --as="": Username to impersonate for the operation. --certificate-authority="": Path to a cert. file for the certificate authority. --client-certificate="": Path to a client certificate file for TLS. --client-key="": Path to a client key file for TLS. diff --git a/docs/user-guide/kubectl/kubectl_api-versions.md b/docs/user-guide/kubectl/kubectl_api-versions.md index daf003b5eb410..9da1ff2386d51 100644 --- a/docs/user-guide/kubectl/kubectl_api-versions.md +++ b/docs/user-guide/kubectl/kubectl_api-versions.md @@ -49,6 +49,7 @@ kubectl api-versions ``` --alsologtostderr[=false]: log to standard error as well as files + --as="": Username to impersonate for the operation. --certificate-authority="": Path to a cert. file for the certificate authority. --client-certificate="": Path to a client certificate file for TLS. --client-key="": Path to a client key file for TLS. @@ -76,7 +77,7 @@ kubectl api-versions * [kubectl](kubectl.md) - kubectl controls the Kubernetes cluster manager -###### Auto generated by spf13/cobra on 23-Mar-2016 +###### Auto generated by spf13/cobra on 5-Apr-2016 [![Analytics](https://kubernetes-site.appspot.com/UA-36037335-10/GitHub/docs/user-guide/kubectl/kubectl_api-versions.md?pixel)]() diff --git a/docs/user-guide/kubectl/kubectl_apply.md b/docs/user-guide/kubectl/kubectl_apply.md index effbd94b71cc3..082a5da6bcefa 100644 --- a/docs/user-guide/kubectl/kubectl_apply.md +++ b/docs/user-guide/kubectl/kubectl_apply.md @@ -74,6 +74,7 @@ cat pod.json | kubectl apply -f - ``` --alsologtostderr[=false]: log to standard error as well as files + --as="": Username to impersonate for the operation. --certificate-authority="": Path to a cert. file for the certificate authority. --client-certificate="": Path to a client certificate file for TLS. --client-key="": Path to a client key file for TLS. diff --git a/docs/user-guide/kubectl/kubectl_attach.md b/docs/user-guide/kubectl/kubectl_attach.md index 0e88c9d3cabae..f45141c5efb6a 100644 --- a/docs/user-guide/kubectl/kubectl_attach.md +++ b/docs/user-guide/kubectl/kubectl_attach.md @@ -71,6 +71,7 @@ kubectl attach 123456-7890 -c ruby-container -i -t ``` --alsologtostderr[=false]: log to standard error as well as files + --as="": Username to impersonate for the operation. --certificate-authority="": Path to a cert. file for the certificate authority. --client-certificate="": Path to a client certificate file for TLS. --client-key="": Path to a client key file for TLS. @@ -98,7 +99,7 @@ kubectl attach 123456-7890 -c ruby-container -i -t * [kubectl](kubectl.md) - kubectl controls the Kubernetes cluster manager -###### Auto generated by spf13/cobra on 23-Mar-2016 +###### Auto generated by spf13/cobra on 5-Apr-2016 [![Analytics](https://kubernetes-site.appspot.com/UA-36037335-10/GitHub/docs/user-guide/kubectl/kubectl_attach.md?pixel)]() diff --git a/docs/user-guide/kubectl/kubectl_autoscale.md b/docs/user-guide/kubectl/kubectl_autoscale.md index 7c1d21c841f70..cd79b5d520508 100644 --- a/docs/user-guide/kubectl/kubectl_autoscale.md +++ b/docs/user-guide/kubectl/kubectl_autoscale.md @@ -85,6 +85,7 @@ kubectl autoscale rc foo --max=5 --cpu-percent=80 ``` --alsologtostderr[=false]: log to standard error as well as files + --as="": Username to impersonate for the operation. --certificate-authority="": Path to a cert. file for the certificate authority. --client-certificate="": Path to a client certificate file for TLS. --client-key="": Path to a client key file for TLS. diff --git a/docs/user-guide/kubectl/kubectl_cluster-info.md b/docs/user-guide/kubectl/kubectl_cluster-info.md index b593e276b607c..82caed80e7b8f 100644 --- a/docs/user-guide/kubectl/kubectl_cluster-info.md +++ b/docs/user-guide/kubectl/kubectl_cluster-info.md @@ -55,6 +55,7 @@ kubectl cluster-info ``` --alsologtostderr[=false]: log to standard error as well as files + --as="": Username to impersonate for the operation. --certificate-authority="": Path to a cert. file for the certificate authority. --client-certificate="": Path to a client certificate file for TLS. --client-key="": Path to a client key file for TLS. @@ -82,7 +83,7 @@ kubectl cluster-info * [kubectl](kubectl.md) - kubectl controls the Kubernetes cluster manager -###### Auto generated by spf13/cobra on 23-Mar-2016 +###### Auto generated by spf13/cobra on 5-Apr-2016 [![Analytics](https://kubernetes-site.appspot.com/UA-36037335-10/GitHub/docs/user-guide/kubectl/kubectl_cluster-info.md?pixel)]() diff --git a/docs/user-guide/kubectl/kubectl_config.md b/docs/user-guide/kubectl/kubectl_config.md index d5a46dae55123..e1cb41845c7f4 100644 --- a/docs/user-guide/kubectl/kubectl_config.md +++ b/docs/user-guide/kubectl/kubectl_config.md @@ -61,6 +61,7 @@ kubectl config SUBCOMMAND ``` --alsologtostderr[=false]: log to standard error as well as files + --as="": Username to impersonate for the operation. --certificate-authority="": Path to a cert. file for the certificate authority. --client-certificate="": Path to a client certificate file for TLS. --client-key="": Path to a client key file for TLS. @@ -95,7 +96,7 @@ kubectl config SUBCOMMAND * [kubectl config use-context](kubectl_config_use-context.md) - Sets the current-context in a kubeconfig file * [kubectl config view](kubectl_config_view.md) - Displays merged kubeconfig settings or a specified kubeconfig file. -###### Auto generated by spf13/cobra on 23-Mar-2016 +###### Auto generated by spf13/cobra on 5-Apr-2016 [![Analytics](https://kubernetes-site.appspot.com/UA-36037335-10/GitHub/docs/user-guide/kubectl/kubectl_config.md?pixel)]() diff --git a/docs/user-guide/kubectl/kubectl_config_current-context.md b/docs/user-guide/kubectl/kubectl_config_current-context.md index 5fad18c064261..989acf4908ca8 100644 --- a/docs/user-guide/kubectl/kubectl_config_current-context.md +++ b/docs/user-guide/kubectl/kubectl_config_current-context.md @@ -56,6 +56,7 @@ kubectl config current-context ``` --alsologtostderr[=false]: log to standard error as well as files + --as="": Username to impersonate for the operation. --certificate-authority="": Path to a cert. file for the certificate authority. --client-certificate="": Path to a client certificate file for TLS. --client-key="": Path to a client key file for TLS. @@ -83,7 +84,7 @@ kubectl config current-context * [kubectl config](kubectl_config.md) - config modifies kubeconfig files -###### Auto generated by spf13/cobra on 23-Mar-2016 +###### Auto generated by spf13/cobra on 5-Apr-2016 [![Analytics](https://kubernetes-site.appspot.com/UA-36037335-10/GitHub/docs/user-guide/kubectl/kubectl_config_current-context.md?pixel)]() diff --git a/docs/user-guide/kubectl/kubectl_config_set-cluster.md b/docs/user-guide/kubectl/kubectl_config_set-cluster.md index 3f01e43589dce..2299fbacf1df7 100644 --- a/docs/user-guide/kubectl/kubectl_config_set-cluster.md +++ b/docs/user-guide/kubectl/kubectl_config_set-cluster.md @@ -73,6 +73,7 @@ kubectl config set-cluster e2e --insecure-skip-tls-verify=true ``` --alsologtostderr[=false]: log to standard error as well as files + --as="": Username to impersonate for the operation. --client-certificate="": Path to a client certificate file for TLS. --client-key="": Path to a client key file for TLS. --cluster="": The name of the kubeconfig cluster to use @@ -97,7 +98,7 @@ kubectl config set-cluster e2e --insecure-skip-tls-verify=true * [kubectl config](kubectl_config.md) - config modifies kubeconfig files -###### Auto generated by spf13/cobra on 1-Apr-2016 +###### Auto generated by spf13/cobra on 5-Apr-2016 [![Analytics](https://kubernetes-site.appspot.com/UA-36037335-10/GitHub/docs/user-guide/kubectl/kubectl_config_set-cluster.md?pixel)]() diff --git a/docs/user-guide/kubectl/kubectl_config_set-context.md b/docs/user-guide/kubectl/kubectl_config_set-context.md index ca7ee9206a7e9..e4b0c5e5c50f9 100644 --- a/docs/user-guide/kubectl/kubectl_config_set-context.md +++ b/docs/user-guide/kubectl/kubectl_config_set-context.md @@ -65,6 +65,7 @@ kubectl config set-context gce --user=cluster-admin ``` --alsologtostderr[=false]: log to standard error as well as files + --as="": Username to impersonate for the operation. --certificate-authority="": Path to a cert. file for the certificate authority. --client-certificate="": Path to a client certificate file for TLS. --client-key="": Path to a client key file for TLS. @@ -89,7 +90,7 @@ kubectl config set-context gce --user=cluster-admin * [kubectl config](kubectl_config.md) - config modifies kubeconfig files -###### Auto generated by spf13/cobra on 23-Mar-2016 +###### Auto generated by spf13/cobra on 5-Apr-2016 [![Analytics](https://kubernetes-site.appspot.com/UA-36037335-10/GitHub/docs/user-guide/kubectl/kubectl_config_set-context.md?pixel)]() diff --git a/docs/user-guide/kubectl/kubectl_config_set-credentials.md b/docs/user-guide/kubectl/kubectl_config_set-credentials.md index 0db49d21daf2d..01096060b02bd 100644 --- a/docs/user-guide/kubectl/kubectl_config_set-credentials.md +++ b/docs/user-guide/kubectl/kubectl_config_set-credentials.md @@ -87,6 +87,7 @@ kubectl config set-credentials cluster-admin --client-certificate=~/.kube/admin. ``` --alsologtostderr[=false]: log to standard error as well as files + --as="": Username to impersonate for the operation. --certificate-authority="": Path to a cert. file for the certificate authority. --cluster="": The name of the kubeconfig cluster to use --context="": The name of the kubeconfig context to use @@ -109,7 +110,7 @@ kubectl config set-credentials cluster-admin --client-certificate=~/.kube/admin. * [kubectl config](kubectl_config.md) - config modifies kubeconfig files -###### Auto generated by spf13/cobra on 1-Apr-2016 +###### Auto generated by spf13/cobra on 5-Apr-2016 [![Analytics](https://kubernetes-site.appspot.com/UA-36037335-10/GitHub/docs/user-guide/kubectl/kubectl_config_set-credentials.md?pixel)]() diff --git a/docs/user-guide/kubectl/kubectl_config_set.md b/docs/user-guide/kubectl/kubectl_config_set.md index 6320ef2c3c963..9e9a99345ac5f 100644 --- a/docs/user-guide/kubectl/kubectl_config_set.md +++ b/docs/user-guide/kubectl/kubectl_config_set.md @@ -51,6 +51,7 @@ kubectl config set PROPERTY_NAME PROPERTY_VALUE ``` --alsologtostderr[=false]: log to standard error as well as files + --as="": Username to impersonate for the operation. --certificate-authority="": Path to a cert. file for the certificate authority. --client-certificate="": Path to a client certificate file for TLS. --client-key="": Path to a client key file for TLS. @@ -78,7 +79,7 @@ kubectl config set PROPERTY_NAME PROPERTY_VALUE * [kubectl config](kubectl_config.md) - config modifies kubeconfig files -###### Auto generated by spf13/cobra on 23-Mar-2016 +###### Auto generated by spf13/cobra on 5-Apr-2016 [![Analytics](https://kubernetes-site.appspot.com/UA-36037335-10/GitHub/docs/user-guide/kubectl/kubectl_config_set.md?pixel)]() diff --git a/docs/user-guide/kubectl/kubectl_config_unset.md b/docs/user-guide/kubectl/kubectl_config_unset.md index 13f6c6ed865f6..c46dabffbd2e5 100644 --- a/docs/user-guide/kubectl/kubectl_config_unset.md +++ b/docs/user-guide/kubectl/kubectl_config_unset.md @@ -50,6 +50,7 @@ kubectl config unset PROPERTY_NAME ``` --alsologtostderr[=false]: log to standard error as well as files + --as="": Username to impersonate for the operation. --certificate-authority="": Path to a cert. file for the certificate authority. --client-certificate="": Path to a client certificate file for TLS. --client-key="": Path to a client key file for TLS. @@ -77,7 +78,7 @@ kubectl config unset PROPERTY_NAME * [kubectl config](kubectl_config.md) - config modifies kubeconfig files -###### Auto generated by spf13/cobra on 23-Mar-2016 +###### Auto generated by spf13/cobra on 5-Apr-2016 [![Analytics](https://kubernetes-site.appspot.com/UA-36037335-10/GitHub/docs/user-guide/kubectl/kubectl_config_unset.md?pixel)]() diff --git a/docs/user-guide/kubectl/kubectl_config_use-context.md b/docs/user-guide/kubectl/kubectl_config_use-context.md index affed2289bdf6..ae63a23ea8f5a 100644 --- a/docs/user-guide/kubectl/kubectl_config_use-context.md +++ b/docs/user-guide/kubectl/kubectl_config_use-context.md @@ -49,6 +49,7 @@ kubectl config use-context CONTEXT_NAME ``` --alsologtostderr[=false]: log to standard error as well as files + --as="": Username to impersonate for the operation. --certificate-authority="": Path to a cert. file for the certificate authority. --client-certificate="": Path to a client certificate file for TLS. --client-key="": Path to a client key file for TLS. @@ -76,7 +77,7 @@ kubectl config use-context CONTEXT_NAME * [kubectl config](kubectl_config.md) - config modifies kubeconfig files -###### Auto generated by spf13/cobra on 23-Mar-2016 +###### Auto generated by spf13/cobra on 5-Apr-2016 [![Analytics](https://kubernetes-site.appspot.com/UA-36037335-10/GitHub/docs/user-guide/kubectl/kubectl_config_use-context.md?pixel)]() diff --git a/docs/user-guide/kubectl/kubectl_config_view.md b/docs/user-guide/kubectl/kubectl_config_view.md index 2ff6417f197b1..1d502f94304ff 100644 --- a/docs/user-guide/kubectl/kubectl_config_view.md +++ b/docs/user-guide/kubectl/kubectl_config_view.md @@ -77,6 +77,7 @@ kubectl config view -o jsonpath='{.users[?(@.name == "e2e")].user.password}' ``` --alsologtostderr[=false]: log to standard error as well as files + --as="": Username to impersonate for the operation. --certificate-authority="": Path to a cert. file for the certificate authority. --client-certificate="": Path to a client certificate file for TLS. --client-key="": Path to a client key file for TLS. @@ -104,7 +105,7 @@ kubectl config view -o jsonpath='{.users[?(@.name == "e2e")].user.password}' * [kubectl config](kubectl_config.md) - config modifies kubeconfig files -###### Auto generated by spf13/cobra on 23-Mar-2016 +###### Auto generated by spf13/cobra on 5-Apr-2016 [![Analytics](https://kubernetes-site.appspot.com/UA-36037335-10/GitHub/docs/user-guide/kubectl/kubectl_config_view.md?pixel)]() diff --git a/docs/user-guide/kubectl/kubectl_convert.md b/docs/user-guide/kubectl/kubectl_convert.md index ece241a8618d8..93fdbedb83b00 100644 --- a/docs/user-guide/kubectl/kubectl_convert.md +++ b/docs/user-guide/kubectl/kubectl_convert.md @@ -91,6 +91,7 @@ kubectl convert -f . | kubectl create -f - ``` --alsologtostderr[=false]: log to standard error as well as files + --as="": Username to impersonate for the operation. --certificate-authority="": Path to a cert. file for the certificate authority. --client-certificate="": Path to a client certificate file for TLS. --client-key="": Path to a client key file for TLS. diff --git a/docs/user-guide/kubectl/kubectl_cordon.md b/docs/user-guide/kubectl/kubectl_cordon.md index f3afb7e6a76e1..83d30ab1433eb 100644 --- a/docs/user-guide/kubectl/kubectl_cordon.md +++ b/docs/user-guide/kubectl/kubectl_cordon.md @@ -58,6 +58,7 @@ kubectl cordon foo ``` --alsologtostderr[=false]: log to standard error as well as files + --as="": Username to impersonate for the operation. --certificate-authority="": Path to a cert. file for the certificate authority. --client-certificate="": Path to a client certificate file for TLS. --client-key="": Path to a client key file for TLS. @@ -85,7 +86,7 @@ kubectl cordon foo * [kubectl](kubectl.md) - kubectl controls the Kubernetes cluster manager -###### Auto generated by spf13/cobra on 23-Mar-2016 +###### Auto generated by spf13/cobra on 5-Apr-2016 [![Analytics](https://kubernetes-site.appspot.com/UA-36037335-10/GitHub/docs/user-guide/kubectl/kubectl_cordon.md?pixel)]() diff --git a/docs/user-guide/kubectl/kubectl_create.md b/docs/user-guide/kubectl/kubectl_create.md index 581c471766d9b..f29f65427c327 100644 --- a/docs/user-guide/kubectl/kubectl_create.md +++ b/docs/user-guide/kubectl/kubectl_create.md @@ -74,6 +74,7 @@ cat pod.json | kubectl create -f - ``` --alsologtostderr[=false]: log to standard error as well as files + --as="": Username to impersonate for the operation. --certificate-authority="": Path to a cert. file for the certificate authority. --client-certificate="": Path to a client certificate file for TLS. --client-key="": Path to a client key file for TLS. diff --git a/docs/user-guide/kubectl/kubectl_create_configmap.md b/docs/user-guide/kubectl/kubectl_create_configmap.md index e45a8343e820a..638d50a43005c 100644 --- a/docs/user-guide/kubectl/kubectl_create_configmap.md +++ b/docs/user-guide/kubectl/kubectl_create_configmap.md @@ -91,6 +91,7 @@ kubectl create configmap NAME [--type=string] [--from-file=[key=]source] [--from ``` --alsologtostderr[=false]: log to standard error as well as files + --as="": Username to impersonate for the operation. --certificate-authority="": Path to a cert. file for the certificate authority. --client-certificate="": Path to a client certificate file for TLS. --client-key="": Path to a client key file for TLS. @@ -118,7 +119,7 @@ kubectl create configmap NAME [--type=string] [--from-file=[key=]source] [--from * [kubectl create](kubectl_create.md) - Create a resource by filename or stdin -###### Auto generated by spf13/cobra on 31-Mar-2016 +###### Auto generated by spf13/cobra on 5-Apr-2016 [![Analytics](https://kubernetes-site.appspot.com/UA-36037335-10/GitHub/docs/user-guide/kubectl/kubectl_create_configmap.md?pixel)]() diff --git a/docs/user-guide/kubectl/kubectl_create_namespace.md b/docs/user-guide/kubectl/kubectl_create_namespace.md index a82dfd1ee8df4..efc011489b7f6 100644 --- a/docs/user-guide/kubectl/kubectl_create_namespace.md +++ b/docs/user-guide/kubectl/kubectl_create_namespace.md @@ -74,6 +74,7 @@ kubectl create namespace NAME [--dry-run] ``` --alsologtostderr[=false]: log to standard error as well as files + --as="": Username to impersonate for the operation. --certificate-authority="": Path to a cert. file for the certificate authority. --client-certificate="": Path to a client certificate file for TLS. --client-key="": Path to a client key file for TLS. @@ -101,7 +102,7 @@ kubectl create namespace NAME [--dry-run] * [kubectl create](kubectl_create.md) - Create a resource by filename or stdin -###### Auto generated by spf13/cobra on 23-Mar-2016 +###### Auto generated by spf13/cobra on 5-Apr-2016 [![Analytics](https://kubernetes-site.appspot.com/UA-36037335-10/GitHub/docs/user-guide/kubectl/kubectl_create_namespace.md?pixel)]() diff --git a/docs/user-guide/kubectl/kubectl_create_secret.md b/docs/user-guide/kubectl/kubectl_create_secret.md index 4fbba72f09562..011c5cd349ce2 100644 --- a/docs/user-guide/kubectl/kubectl_create_secret.md +++ b/docs/user-guide/kubectl/kubectl_create_secret.md @@ -49,6 +49,7 @@ kubectl create secret ``` --alsologtostderr[=false]: log to standard error as well as files + --as="": Username to impersonate for the operation. --certificate-authority="": Path to a cert. file for the certificate authority. --client-certificate="": Path to a client certificate file for TLS. --client-key="": Path to a client key file for TLS. @@ -78,7 +79,7 @@ kubectl create secret * [kubectl create secret docker-registry](kubectl_create_secret_docker-registry.md) - Create a secret for use with a Docker registry. * [kubectl create secret generic](kubectl_create_secret_generic.md) - Create a secret from a local file, directory or literal value. -###### Auto generated by spf13/cobra on 23-Mar-2016 +###### Auto generated by spf13/cobra on 5-Apr-2016 [![Analytics](https://kubernetes-site.appspot.com/UA-36037335-10/GitHub/docs/user-guide/kubectl/kubectl_create_secret.md?pixel)]() diff --git a/docs/user-guide/kubectl/kubectl_create_secret_docker-registry.md b/docs/user-guide/kubectl/kubectl_create_secret_docker-registry.md index 5cc3486d10206..f2c1907d47b54 100644 --- a/docs/user-guide/kubectl/kubectl_create_secret_docker-registry.md +++ b/docs/user-guide/kubectl/kubectl_create_secret_docker-registry.md @@ -90,6 +90,7 @@ kubectl create secret docker-registry NAME --docker-username=user --docker-passw ``` --alsologtostderr[=false]: log to standard error as well as files + --as="": Username to impersonate for the operation. --certificate-authority="": Path to a cert. file for the certificate authority. --client-certificate="": Path to a client certificate file for TLS. --client-key="": Path to a client key file for TLS. @@ -117,7 +118,7 @@ kubectl create secret docker-registry NAME --docker-username=user --docker-passw * [kubectl create secret](kubectl_create_secret.md) - Create a secret using specified subcommand. -###### Auto generated by spf13/cobra on 23-Mar-2016 +###### Auto generated by spf13/cobra on 5-Apr-2016 [![Analytics](https://kubernetes-site.appspot.com/UA-36037335-10/GitHub/docs/user-guide/kubectl/kubectl_create_secret_docker-registry.md?pixel)]() diff --git a/docs/user-guide/kubectl/kubectl_create_secret_generic.md b/docs/user-guide/kubectl/kubectl_create_secret_generic.md index 25fc21a33bd1d..77c799aea3f98 100644 --- a/docs/user-guide/kubectl/kubectl_create_secret_generic.md +++ b/docs/user-guide/kubectl/kubectl_create_secret_generic.md @@ -93,6 +93,7 @@ kubectl create secret generic NAME [--type=string] [--from-file=[key=]source] [- ``` --alsologtostderr[=false]: log to standard error as well as files + --as="": Username to impersonate for the operation. --certificate-authority="": Path to a cert. file for the certificate authority. --client-certificate="": Path to a client certificate file for TLS. --client-key="": Path to a client key file for TLS. @@ -120,7 +121,7 @@ kubectl create secret generic NAME [--type=string] [--from-file=[key=]source] [- * [kubectl create secret](kubectl_create_secret.md) - Create a secret using specified subcommand. -###### Auto generated by spf13/cobra on 31-Mar-2016 +###### Auto generated by spf13/cobra on 5-Apr-2016 [![Analytics](https://kubernetes-site.appspot.com/UA-36037335-10/GitHub/docs/user-guide/kubectl/kubectl_create_secret_generic.md?pixel)]() diff --git a/docs/user-guide/kubectl/kubectl_create_serviceaccount.md b/docs/user-guide/kubectl/kubectl_create_serviceaccount.md index b1064eae45c84..0ad77889a0102 100644 --- a/docs/user-guide/kubectl/kubectl_create_serviceaccount.md +++ b/docs/user-guide/kubectl/kubectl_create_serviceaccount.md @@ -75,6 +75,7 @@ kubectl create serviceaccount NAME [--dry-run] ``` --alsologtostderr[=false]: log to standard error as well as files + --as="": Username to impersonate for the operation. --certificate-authority="": Path to a cert. file for the certificate authority. --client-certificate="": Path to a client certificate file for TLS. --client-key="": Path to a client key file for TLS. @@ -102,7 +103,7 @@ kubectl create serviceaccount NAME [--dry-run] * [kubectl create](kubectl_create.md) - Create a resource by filename or stdin -###### Auto generated by spf13/cobra on 23-Mar-2016 +###### Auto generated by spf13/cobra on 5-Apr-2016 [![Analytics](https://kubernetes-site.appspot.com/UA-36037335-10/GitHub/docs/user-guide/kubectl/kubectl_create_serviceaccount.md?pixel)]() diff --git a/docs/user-guide/kubectl/kubectl_delete.md b/docs/user-guide/kubectl/kubectl_delete.md index de803e050102d..9de55e9f5ffce 100644 --- a/docs/user-guide/kubectl/kubectl_delete.md +++ b/docs/user-guide/kubectl/kubectl_delete.md @@ -94,6 +94,7 @@ kubectl delete pods --all ``` --alsologtostderr[=false]: log to standard error as well as files + --as="": Username to impersonate for the operation. --certificate-authority="": Path to a cert. file for the certificate authority. --client-certificate="": Path to a client certificate file for TLS. --client-key="": Path to a client key file for TLS. diff --git a/docs/user-guide/kubectl/kubectl_describe.md b/docs/user-guide/kubectl/kubectl_describe.md index 9d63a8fd6514a..b92e804f89fe4 100644 --- a/docs/user-guide/kubectl/kubectl_describe.md +++ b/docs/user-guide/kubectl/kubectl_describe.md @@ -95,6 +95,7 @@ kubectl describe pods frontend ``` --alsologtostderr[=false]: log to standard error as well as files + --as="": Username to impersonate for the operation. --certificate-authority="": Path to a cert. file for the certificate authority. --client-certificate="": Path to a client certificate file for TLS. --client-key="": Path to a client key file for TLS. diff --git a/docs/user-guide/kubectl/kubectl_drain.md b/docs/user-guide/kubectl/kubectl_drain.md index 0f612eb0345b5..802c0fb46f36b 100644 --- a/docs/user-guide/kubectl/kubectl_drain.md +++ b/docs/user-guide/kubectl/kubectl_drain.md @@ -81,6 +81,7 @@ $ kubectl drain foo --grace-period=900 ``` --alsologtostderr[=false]: log to standard error as well as files + --as="": Username to impersonate for the operation. --certificate-authority="": Path to a cert. file for the certificate authority. --client-certificate="": Path to a client certificate file for TLS. --client-key="": Path to a client key file for TLS. @@ -108,7 +109,7 @@ $ kubectl drain foo --grace-period=900 * [kubectl](kubectl.md) - kubectl controls the Kubernetes cluster manager -###### Auto generated by spf13/cobra on 31-Mar-2016 +###### Auto generated by spf13/cobra on 5-Apr-2016 [![Analytics](https://kubernetes-site.appspot.com/UA-36037335-10/GitHub/docs/user-guide/kubectl/kubectl_drain.md?pixel)]() diff --git a/docs/user-guide/kubectl/kubectl_edit.md b/docs/user-guide/kubectl/kubectl_edit.md index 6e7e598bd9f71..cae01701a4461 100644 --- a/docs/user-guide/kubectl/kubectl_edit.md +++ b/docs/user-guide/kubectl/kubectl_edit.md @@ -93,6 +93,7 @@ kubectl edit (RESOURCE/NAME | -f FILENAME) ``` --alsologtostderr[=false]: log to standard error as well as files + --as="": Username to impersonate for the operation. --certificate-authority="": Path to a cert. file for the certificate authority. --client-certificate="": Path to a client certificate file for TLS. --client-key="": Path to a client key file for TLS. diff --git a/docs/user-guide/kubectl/kubectl_exec.md b/docs/user-guide/kubectl/kubectl_exec.md index 8aac4accd2f2a..6536156a8e942 100644 --- a/docs/user-guide/kubectl/kubectl_exec.md +++ b/docs/user-guide/kubectl/kubectl_exec.md @@ -72,6 +72,7 @@ kubectl exec 123456-7890 -c ruby-container -i -t -- bash -il ``` --alsologtostderr[=false]: log to standard error as well as files + --as="": Username to impersonate for the operation. --certificate-authority="": Path to a cert. file for the certificate authority. --client-certificate="": Path to a client certificate file for TLS. --client-key="": Path to a client key file for TLS. @@ -99,7 +100,7 @@ kubectl exec 123456-7890 -c ruby-container -i -t -- bash -il * [kubectl](kubectl.md) - kubectl controls the Kubernetes cluster manager -###### Auto generated by spf13/cobra on 23-Mar-2016 +###### Auto generated by spf13/cobra on 5-Apr-2016 [![Analytics](https://kubernetes-site.appspot.com/UA-36037335-10/GitHub/docs/user-guide/kubectl/kubectl_exec.md?pixel)]() diff --git a/docs/user-guide/kubectl/kubectl_explain.md b/docs/user-guide/kubectl/kubectl_explain.md index c5a2bb603b595..39fdb9e722271 100644 --- a/docs/user-guide/kubectl/kubectl_explain.md +++ b/docs/user-guide/kubectl/kubectl_explain.md @@ -72,6 +72,7 @@ kubectl explain pods.spec.containers ``` --alsologtostderr[=false]: log to standard error as well as files + --as="": Username to impersonate for the operation. --certificate-authority="": Path to a cert. file for the certificate authority. --client-certificate="": Path to a client certificate file for TLS. --client-key="": Path to a client key file for TLS. diff --git a/docs/user-guide/kubectl/kubectl_expose.md b/docs/user-guide/kubectl/kubectl_expose.md index ef0f723a328ac..71d89ade4839b 100644 --- a/docs/user-guide/kubectl/kubectl_expose.md +++ b/docs/user-guide/kubectl/kubectl_expose.md @@ -111,6 +111,7 @@ kubectl expose deployment nginx --port=80 --target-port=8000 ``` --alsologtostderr[=false]: log to standard error as well as files + --as="": Username to impersonate for the operation. --certificate-authority="": Path to a cert. file for the certificate authority. --client-certificate="": Path to a client certificate file for TLS. --client-key="": Path to a client key file for TLS. diff --git a/docs/user-guide/kubectl/kubectl_get.md b/docs/user-guide/kubectl/kubectl_get.md index 8fd350ff621cd..f63c82a464d5d 100644 --- a/docs/user-guide/kubectl/kubectl_get.md +++ b/docs/user-guide/kubectl/kubectl_get.md @@ -107,6 +107,7 @@ kubectl get rc/web service/frontend pods/web-pod-13je7 ``` --alsologtostderr[=false]: log to standard error as well as files + --as="": Username to impersonate for the operation. --certificate-authority="": Path to a cert. file for the certificate authority. --client-certificate="": Path to a client certificate file for TLS. --client-key="": Path to a client key file for TLS. diff --git a/docs/user-guide/kubectl/kubectl_label.md b/docs/user-guide/kubectl/kubectl_label.md index 87a5ee968fe5f..7fc87a6598355 100644 --- a/docs/user-guide/kubectl/kubectl_label.md +++ b/docs/user-guide/kubectl/kubectl_label.md @@ -97,6 +97,7 @@ kubectl label pods foo bar- ``` --alsologtostderr[=false]: log to standard error as well as files + --as="": Username to impersonate for the operation. --certificate-authority="": Path to a cert. file for the certificate authority. --client-certificate="": Path to a client certificate file for TLS. --client-key="": Path to a client key file for TLS. diff --git a/docs/user-guide/kubectl/kubectl_logs.md b/docs/user-guide/kubectl/kubectl_logs.md index 8a2e4bb647776..ceaefc7827ace 100644 --- a/docs/user-guide/kubectl/kubectl_logs.md +++ b/docs/user-guide/kubectl/kubectl_logs.md @@ -82,6 +82,7 @@ kubectl logs --since=1h nginx ``` --alsologtostderr[=false]: log to standard error as well as files + --as="": Username to impersonate for the operation. --certificate-authority="": Path to a cert. file for the certificate authority. --client-certificate="": Path to a client certificate file for TLS. --client-key="": Path to a client key file for TLS. @@ -109,7 +110,7 @@ kubectl logs --since=1h nginx * [kubectl](kubectl.md) - kubectl controls the Kubernetes cluster manager -###### Auto generated by spf13/cobra on 23-Mar-2016 +###### Auto generated by spf13/cobra on 5-Apr-2016 [![Analytics](https://kubernetes-site.appspot.com/UA-36037335-10/GitHub/docs/user-guide/kubectl/kubectl_logs.md?pixel)]() diff --git a/docs/user-guide/kubectl/kubectl_namespace.md b/docs/user-guide/kubectl/kubectl_namespace.md index 8cd41ad464c41..448360bd96255 100644 --- a/docs/user-guide/kubectl/kubectl_namespace.md +++ b/docs/user-guide/kubectl/kubectl_namespace.md @@ -52,6 +52,7 @@ kubectl namespace [namespace] ``` --alsologtostderr[=false]: log to standard error as well as files + --as="": Username to impersonate for the operation. --certificate-authority="": Path to a cert. file for the certificate authority. --client-certificate="": Path to a client certificate file for TLS. --client-key="": Path to a client key file for TLS. @@ -79,7 +80,7 @@ kubectl namespace [namespace] * [kubectl](kubectl.md) - kubectl controls the Kubernetes cluster manager -###### Auto generated by spf13/cobra on 23-Mar-2016 +###### Auto generated by spf13/cobra on 5-Apr-2016 [![Analytics](https://kubernetes-site.appspot.com/UA-36037335-10/GitHub/docs/user-guide/kubectl/kubectl_namespace.md?pixel)]() diff --git a/docs/user-guide/kubectl/kubectl_patch.md b/docs/user-guide/kubectl/kubectl_patch.md index 93be2b28af432..a47f01f131636 100644 --- a/docs/user-guide/kubectl/kubectl_patch.md +++ b/docs/user-guide/kubectl/kubectl_patch.md @@ -82,6 +82,7 @@ kubectl patch pod valid-pod -type='json' -p='[{"op": "replace", "path": "/spec/c ``` --alsologtostderr[=false]: log to standard error as well as files + --as="": Username to impersonate for the operation. --certificate-authority="": Path to a cert. file for the certificate authority. --client-certificate="": Path to a client certificate file for TLS. --client-key="": Path to a client key file for TLS. diff --git a/docs/user-guide/kubectl/kubectl_port-forward.md b/docs/user-guide/kubectl/kubectl_port-forward.md index 256c341a60f5d..ea9ec494fab09 100644 --- a/docs/user-guide/kubectl/kubectl_port-forward.md +++ b/docs/user-guide/kubectl/kubectl_port-forward.md @@ -72,6 +72,7 @@ kubectl port-forward mypod 0:5000 ``` --alsologtostderr[=false]: log to standard error as well as files + --as="": Username to impersonate for the operation. --certificate-authority="": Path to a cert. file for the certificate authority. --client-certificate="": Path to a client certificate file for TLS. --client-key="": Path to a client key file for TLS. @@ -99,7 +100,7 @@ kubectl port-forward mypod 0:5000 * [kubectl](kubectl.md) - kubectl controls the Kubernetes cluster manager -###### Auto generated by spf13/cobra on 23-Mar-2016 +###### Auto generated by spf13/cobra on 5-Apr-2016 [![Analytics](https://kubernetes-site.appspot.com/UA-36037335-10/GitHub/docs/user-guide/kubectl/kubectl_port-forward.md?pixel)]() diff --git a/docs/user-guide/kubectl/kubectl_proxy.md b/docs/user-guide/kubectl/kubectl_proxy.md index 4a84fb438aadb..76c44d68af00a 100644 --- a/docs/user-guide/kubectl/kubectl_proxy.md +++ b/docs/user-guide/kubectl/kubectl_proxy.md @@ -95,6 +95,7 @@ kubectl proxy --api-prefix=/k8s-api ``` --alsologtostderr[=false]: log to standard error as well as files + --as="": Username to impersonate for the operation. --certificate-authority="": Path to a cert. file for the certificate authority. --client-certificate="": Path to a client certificate file for TLS. --client-key="": Path to a client key file for TLS. @@ -122,7 +123,7 @@ kubectl proxy --api-prefix=/k8s-api * [kubectl](kubectl.md) - kubectl controls the Kubernetes cluster manager -###### Auto generated by spf13/cobra on 23-Mar-2016 +###### Auto generated by spf13/cobra on 5-Apr-2016 [![Analytics](https://kubernetes-site.appspot.com/UA-36037335-10/GitHub/docs/user-guide/kubectl/kubectl_proxy.md?pixel)]() diff --git a/docs/user-guide/kubectl/kubectl_replace.md b/docs/user-guide/kubectl/kubectl_replace.md index a3548f6c1b848..8285b0c42b8e5 100644 --- a/docs/user-guide/kubectl/kubectl_replace.md +++ b/docs/user-guide/kubectl/kubectl_replace.md @@ -88,6 +88,7 @@ kubectl replace --force -f ./pod.json ``` --alsologtostderr[=false]: log to standard error as well as files + --as="": Username to impersonate for the operation. --certificate-authority="": Path to a cert. file for the certificate authority. --client-certificate="": Path to a client certificate file for TLS. --client-key="": Path to a client key file for TLS. diff --git a/docs/user-guide/kubectl/kubectl_rolling-update.md b/docs/user-guide/kubectl/kubectl_rolling-update.md index a99d66d66a910..cd5551b07e92b 100644 --- a/docs/user-guide/kubectl/kubectl_rolling-update.md +++ b/docs/user-guide/kubectl/kubectl_rolling-update.md @@ -98,6 +98,7 @@ kubectl rolling-update frontend-v1 frontend-v2 --rollback ``` --alsologtostderr[=false]: log to standard error as well as files + --as="": Username to impersonate for the operation. --certificate-authority="": Path to a cert. file for the certificate authority. --client-certificate="": Path to a client certificate file for TLS. --client-key="": Path to a client key file for TLS. @@ -125,7 +126,7 @@ kubectl rolling-update frontend-v1 frontend-v2 --rollback * [kubectl](kubectl.md) - kubectl controls the Kubernetes cluster manager -###### Auto generated by spf13/cobra on 23-Mar-2016 +###### Auto generated by spf13/cobra on 5-Apr-2016 [![Analytics](https://kubernetes-site.appspot.com/UA-36037335-10/GitHub/docs/user-guide/kubectl/kubectl_rolling-update.md?pixel)]() diff --git a/docs/user-guide/kubectl/kubectl_rollout.md b/docs/user-guide/kubectl/kubectl_rollout.md index 90b65db7d38d8..a0cc2f6943452 100644 --- a/docs/user-guide/kubectl/kubectl_rollout.md +++ b/docs/user-guide/kubectl/kubectl_rollout.md @@ -56,6 +56,7 @@ kubectl rollout undo deployment/abc ``` --alsologtostderr[=false]: log to standard error as well as files + --as="": Username to impersonate for the operation. --certificate-authority="": Path to a cert. file for the certificate authority. --client-certificate="": Path to a client certificate file for TLS. --client-key="": Path to a client key file for TLS. @@ -87,7 +88,7 @@ kubectl rollout undo deployment/abc * [kubectl rollout resume](kubectl_rollout_resume.md) - Resume a paused resource * [kubectl rollout undo](kubectl_rollout_undo.md) - undoes a previous rollout -###### Auto generated by spf13/cobra on 25-Mar-2016 +###### Auto generated by spf13/cobra on 5-Apr-2016 [![Analytics](https://kubernetes-site.appspot.com/UA-36037335-10/GitHub/docs/user-guide/kubectl/kubectl_rollout.md?pixel)]() diff --git a/docs/user-guide/kubectl/kubectl_rollout_history.md b/docs/user-guide/kubectl/kubectl_rollout_history.md index 97cc674f7765a..da0338a14b398 100644 --- a/docs/user-guide/kubectl/kubectl_rollout_history.md +++ b/docs/user-guide/kubectl/kubectl_rollout_history.md @@ -67,6 +67,7 @@ kubectl rollout history deployment/abc --revision=3 ``` --alsologtostderr[=false]: log to standard error as well as files + --as="": Username to impersonate for the operation. --certificate-authority="": Path to a cert. file for the certificate authority. --client-certificate="": Path to a client certificate file for TLS. --client-key="": Path to a client key file for TLS. diff --git a/docs/user-guide/kubectl/kubectl_rollout_pause.md b/docs/user-guide/kubectl/kubectl_rollout_pause.md index 8f85f55dee95f..0894a9e132e80 100644 --- a/docs/user-guide/kubectl/kubectl_rollout_pause.md +++ b/docs/user-guide/kubectl/kubectl_rollout_pause.md @@ -69,6 +69,7 @@ kubectl rollout pause deployment/nginx ``` --alsologtostderr[=false]: log to standard error as well as files + --as="": Username to impersonate for the operation. --certificate-authority="": Path to a cert. file for the certificate authority. --client-certificate="": Path to a client certificate file for TLS. --client-key="": Path to a client key file for TLS. diff --git a/docs/user-guide/kubectl/kubectl_rollout_resume.md b/docs/user-guide/kubectl/kubectl_rollout_resume.md index 6da9e8d46aea2..b97473a07a594 100644 --- a/docs/user-guide/kubectl/kubectl_rollout_resume.md +++ b/docs/user-guide/kubectl/kubectl_rollout_resume.md @@ -67,6 +67,7 @@ kubectl rollout resume deployment/nginx ``` --alsologtostderr[=false]: log to standard error as well as files + --as="": Username to impersonate for the operation. --certificate-authority="": Path to a cert. file for the certificate authority. --client-certificate="": Path to a client certificate file for TLS. --client-key="": Path to a client key file for TLS. diff --git a/docs/user-guide/kubectl/kubectl_rollout_undo.md b/docs/user-guide/kubectl/kubectl_rollout_undo.md index ba5357d166b7e..224c56c1137e4 100644 --- a/docs/user-guide/kubectl/kubectl_rollout_undo.md +++ b/docs/user-guide/kubectl/kubectl_rollout_undo.md @@ -67,6 +67,7 @@ kubectl rollout undo deployment/abc --to-revision=3 ``` --alsologtostderr[=false]: log to standard error as well as files + --as="": Username to impersonate for the operation. --certificate-authority="": Path to a cert. file for the certificate authority. --client-certificate="": Path to a client certificate file for TLS. --client-key="": Path to a client key file for TLS. diff --git a/docs/user-guide/kubectl/kubectl_run.md b/docs/user-guide/kubectl/kubectl_run.md index fbb4eaf8d9102..fb424ca01e862 100644 --- a/docs/user-guide/kubectl/kubectl_run.md +++ b/docs/user-guide/kubectl/kubectl_run.md @@ -120,6 +120,7 @@ kubectl run pi --image=perl --restart=OnFailure -- perl -Mbignum=bpi -wle 'print ``` --alsologtostderr[=false]: log to standard error as well as files + --as="": Username to impersonate for the operation. --certificate-authority="": Path to a cert. file for the certificate authority. --client-certificate="": Path to a client certificate file for TLS. --client-key="": Path to a client key file for TLS. @@ -147,7 +148,7 @@ kubectl run pi --image=perl --restart=OnFailure -- perl -Mbignum=bpi -wle 'print * [kubectl](kubectl.md) - kubectl controls the Kubernetes cluster manager -###### Auto generated by spf13/cobra on 23-Mar-2016 +###### Auto generated by spf13/cobra on 5-Apr-2016 [![Analytics](https://kubernetes-site.appspot.com/UA-36037335-10/GitHub/docs/user-guide/kubectl/kubectl_run.md?pixel)]() diff --git a/docs/user-guide/kubectl/kubectl_scale.md b/docs/user-guide/kubectl/kubectl_scale.md index 855a070df5a64..9d4cdf319ad5c 100644 --- a/docs/user-guide/kubectl/kubectl_scale.md +++ b/docs/user-guide/kubectl/kubectl_scale.md @@ -87,6 +87,7 @@ kubectl scale --replicas=3 job/cron ``` --alsologtostderr[=false]: log to standard error as well as files + --as="": Username to impersonate for the operation. --certificate-authority="": Path to a cert. file for the certificate authority. --client-certificate="": Path to a client certificate file for TLS. --client-key="": Path to a client key file for TLS. diff --git a/docs/user-guide/kubectl/kubectl_uncordon.md b/docs/user-guide/kubectl/kubectl_uncordon.md index a5a15f4bd7035..35169d6ca820c 100644 --- a/docs/user-guide/kubectl/kubectl_uncordon.md +++ b/docs/user-guide/kubectl/kubectl_uncordon.md @@ -58,6 +58,7 @@ $ kubectl uncordon foo ``` --alsologtostderr[=false]: log to standard error as well as files + --as="": Username to impersonate for the operation. --certificate-authority="": Path to a cert. file for the certificate authority. --client-certificate="": Path to a client certificate file for TLS. --client-key="": Path to a client key file for TLS. @@ -85,7 +86,7 @@ $ kubectl uncordon foo * [kubectl](kubectl.md) - kubectl controls the Kubernetes cluster manager -###### Auto generated by spf13/cobra on 31-Mar-2016 +###### Auto generated by spf13/cobra on 5-Apr-2016 [![Analytics](https://kubernetes-site.appspot.com/UA-36037335-10/GitHub/docs/user-guide/kubectl/kubectl_uncordon.md?pixel)]() diff --git a/docs/user-guide/kubectl/kubectl_version.md b/docs/user-guide/kubectl/kubectl_version.md index 0e97c66d30a93..f3a8af3950274 100644 --- a/docs/user-guide/kubectl/kubectl_version.md +++ b/docs/user-guide/kubectl/kubectl_version.md @@ -55,6 +55,7 @@ kubectl version ``` --alsologtostderr[=false]: log to standard error as well as files + --as="": Username to impersonate for the operation. --certificate-authority="": Path to a cert. file for the certificate authority. --client-certificate="": Path to a client certificate file for TLS. --client-key="": Path to a client key file for TLS. @@ -82,7 +83,7 @@ kubectl version * [kubectl](kubectl.md) - kubectl controls the Kubernetes cluster manager -###### Auto generated by spf13/cobra on 23-Mar-2016 +###### Auto generated by spf13/cobra on 5-Apr-2016 [![Analytics](https://kubernetes-site.appspot.com/UA-36037335-10/GitHub/docs/user-guide/kubectl/kubectl_version.md?pixel)]() diff --git a/pkg/apiserver/handlers.go b/pkg/apiserver/handlers.go index 2bfd7a4165d50..b969621f2aa86 100644 --- a/pkg/apiserver/handlers.go +++ b/pkg/apiserver/handlers.go @@ -32,7 +32,9 @@ import ( "k8s.io/kubernetes/pkg/api" "k8s.io/kubernetes/pkg/api/errors" "k8s.io/kubernetes/pkg/auth/authorizer" + "k8s.io/kubernetes/pkg/auth/user" "k8s.io/kubernetes/pkg/httplog" + "k8s.io/kubernetes/pkg/serviceaccount" "k8s.io/kubernetes/pkg/util/sets" ) @@ -408,6 +410,65 @@ func (r *requestAttributeGetter) GetAttribs(req *http.Request) authorizer.Attrib return &attribs } +func WithActingAs(handler http.Handler, requestContextMapper api.RequestContextMapper, a authorizer.Authorizer) http.Handler { + return http.HandlerFunc(func(w http.ResponseWriter, req *http.Request) { + requestedSubject := req.Header.Get("Impersonate-User") + if len(requestedSubject) == 0 { + handler.ServeHTTP(w, req) + return + } + + ctx, exists := requestContextMapper.Get(req) + if !exists { + forbidden(w, req) + return + } + requestor, exists := api.UserFrom(ctx) + if !exists { + forbidden(w, req) + return + } + + actingAsAttributes := &authorizer.AttributesRecord{ + User: requestor, + Verb: "impersonate", + APIGroup: api.GroupName, + Resource: "users", + // ResourceName: requestedSubject, + ResourceRequest: true, + } + + err := a.Authorize(actingAsAttributes) + if err != nil { + forbidden(w, req) + return + } + + switch { + case strings.HasPrefix(requestedSubject, serviceaccount.ServiceAccountUsernamePrefix): + namespace, name, err := serviceaccount.SplitUsername(requestedSubject) + if err != nil { + forbidden(w, req) + return + } + requestContextMapper.Update(req, api.WithUser(ctx, serviceaccount.UserInfo(namespace, name, ""))) + + default: + newUser := &user.DefaultInfo{ + Name: requestedSubject, + } + requestContextMapper.Update(req, api.WithUser(ctx, newUser)) + } + + newCtx, _ := requestContextMapper.Get(req) + oldUser, _ := api.UserFrom(ctx) + newUser, _ := api.UserFrom(newCtx) + httplog.LogOf(req, w).Addf("%v is acting as %v", oldUser, newUser) + + handler.ServeHTTP(w, req) + }) +} + // WithAuthorizationCheck passes all authorized requests on to handler, and returns a forbidden error otherwise. func WithAuthorizationCheck(handler http.Handler, getAttribs RequestAttributeGetter, a authorizer.Authorizer) http.Handler { return http.HandlerFunc(func(w http.ResponseWriter, req *http.Request) { diff --git a/pkg/client/restclient/config.go b/pkg/client/restclient/config.go index cbddb2682d5d6..e391949492de8 100644 --- a/pkg/client/restclient/config.go +++ b/pkg/client/restclient/config.go @@ -62,6 +62,9 @@ type Config struct { // TODO: demonstrate an OAuth2 compatible client. BearerToken string + // Impersonate is the username that this RESTClient will impersonate + Impersonate string + // TLSClientConfig contains settings to enable transport layer security TLSClientConfig diff --git a/pkg/client/restclient/transport.go b/pkg/client/restclient/transport.go index 7d4b497c30734..f0d8229204e19 100644 --- a/pkg/client/restclient/transport.go +++ b/pkg/client/restclient/transport.go @@ -62,5 +62,6 @@ func (c *Config) transportConfig() *transport.Config { Username: c.Username, Password: c.Password, BearerToken: c.BearerToken, + Impersonate: c.Impersonate, } } diff --git a/pkg/client/transport/config.go b/pkg/client/transport/config.go index 801977f877af7..63a63fbb47955 100644 --- a/pkg/client/transport/config.go +++ b/pkg/client/transport/config.go @@ -34,6 +34,9 @@ type Config struct { // Bearer token for authentication BearerToken string + // Impersonate is the username that this Config will impersonate + Impersonate string + // Transport may be used for custom HTTP behavior. This attribute may // not be specified with the TLS client certificate options. Use // WrapTransport for most client level operations. diff --git a/pkg/client/transport/round_trippers.go b/pkg/client/transport/round_trippers.go index 6136e080ead0b..55284ebc65f75 100644 --- a/pkg/client/transport/round_trippers.go +++ b/pkg/client/transport/round_trippers.go @@ -48,6 +48,9 @@ func HTTPWrappersForConfig(config *Config, rt http.RoundTripper) (http.RoundTrip if len(config.UserAgent) > 0 { rt = NewUserAgentRoundTripper(config.UserAgent, rt) } + if len(config.Impersonate) > 0 { + rt = NewImpersonatingRoundTripper(config.Impersonate, rt) + } return rt, nil } @@ -130,6 +133,35 @@ func (rt *basicAuthRoundTripper) CancelRequest(req *http.Request) { func (rt *basicAuthRoundTripper) WrappedRoundTripper() http.RoundTripper { return rt.rt } +type impersonatingRoundTripper struct { + impersonate string + delegate http.RoundTripper +} + +// NewImpersonatingRoundTripper will add an Act-As header to a request unless it has already been set. +func NewImpersonatingRoundTripper(impersonate string, delegate http.RoundTripper) http.RoundTripper { + return &impersonatingRoundTripper{impersonate, delegate} +} + +func (rt *impersonatingRoundTripper) RoundTrip(req *http.Request) (*http.Response, error) { + if len(req.Header.Get("Impersonate-User")) != 0 { + return rt.delegate.RoundTrip(req) + } + req = cloneRequest(req) + req.Header.Set("Impersonate-User", rt.impersonate) + return rt.delegate.RoundTrip(req) +} + +func (rt *impersonatingRoundTripper) CancelRequest(req *http.Request) { + if canceler, ok := rt.delegate.(requestCanceler); ok { + canceler.CancelRequest(req) + } else { + glog.Errorf("CancelRequest not implemented") + } +} + +func (rt *impersonatingRoundTripper) WrappedRoundTripper() http.RoundTripper { return rt.delegate } + type bearerAuthRoundTripper struct { bearer string rt http.RoundTripper diff --git a/pkg/client/unversioned/clientcmd/api/types.go b/pkg/client/unversioned/clientcmd/api/types.go index 7e2bfcfa8b8c1..f14143e3f5523 100644 --- a/pkg/client/unversioned/clientcmd/api/types.go +++ b/pkg/client/unversioned/clientcmd/api/types.go @@ -88,6 +88,8 @@ type AuthInfo struct { ClientKeyData []byte `json:"client-key-data,omitempty"` // Token is the bearer token for authentication to the kubernetes cluster. Token string `json:"token,omitempty"` + // Impersonate is the username to act-as. + Impersonate string `json:"act-as,omitempty"` // Username is the username for basic authentication to the kubernetes cluster. Username string `json:"username,omitempty"` // Password is the password for basic authentication to the kubernetes cluster. diff --git a/pkg/client/unversioned/clientcmd/api/v1/types.go b/pkg/client/unversioned/clientcmd/api/v1/types.go index c9b4ab56ba403..65a6f3c455a26 100644 --- a/pkg/client/unversioned/clientcmd/api/v1/types.go +++ b/pkg/client/unversioned/clientcmd/api/v1/types.go @@ -82,6 +82,8 @@ type AuthInfo struct { ClientKeyData []byte `json:"client-key-data,omitempty"` // Token is the bearer token for authentication to the kubernetes cluster. Token string `json:"token,omitempty"` + // Impersonate is the username to imperonate. The name matches the flag. + Impersonate string `json:"as,omitempty"` // Username is the username for basic authentication to the kubernetes cluster. Username string `json:"username,omitempty"` // Password is the password for basic authentication to the kubernetes cluster. diff --git a/pkg/client/unversioned/clientcmd/client_config.go b/pkg/client/unversioned/clientcmd/client_config.go index 533feb54afaf5..b84197fc68a17 100644 --- a/pkg/client/unversioned/clientcmd/client_config.go +++ b/pkg/client/unversioned/clientcmd/client_config.go @@ -99,6 +99,9 @@ func (config *DirectClientConfig) ClientConfig() (*restclient.Config, error) { u.Fragment = "" clientConfig.Host = u.String() } + if len(configAuthInfo.Impersonate) > 0 { + clientConfig.Impersonate = configAuthInfo.Impersonate + } // only try to read the auth information if we are secure if restclient.IsConfigTransportTLS(*clientConfig) { @@ -156,6 +159,9 @@ func getUserIdentificationPartialConfig(configAuthInfo clientcmdapi.AuthInfo, fa if len(configAuthInfo.Token) > 0 { mergedConfig.BearerToken = configAuthInfo.Token } + if len(configAuthInfo.Impersonate) > 0 { + mergedConfig.Impersonate = configAuthInfo.Impersonate + } if len(configAuthInfo.ClientCertificate) > 0 || len(configAuthInfo.ClientCertificateData) > 0 { mergedConfig.CertFile = configAuthInfo.ClientCertificate mergedConfig.CertData = configAuthInfo.ClientCertificateData diff --git a/pkg/client/unversioned/clientcmd/overrides.go b/pkg/client/unversioned/clientcmd/overrides.go index 9996d2f44aff8..f6dda97f1cbd4 100644 --- a/pkg/client/unversioned/clientcmd/overrides.go +++ b/pkg/client/unversioned/clientcmd/overrides.go @@ -47,6 +47,7 @@ type AuthOverrideFlags struct { ClientCertificate FlagInfo ClientKey FlagInfo Token FlagInfo + Impersonate FlagInfo Username FlagInfo Password FlagInfo } @@ -115,6 +116,7 @@ const ( FlagCAFile = "certificate-authority" FlagEmbedCerts = "embed-certs" FlagBearerToken = "token" + FlagImpersonate = "as" FlagUsername = "username" FlagPassword = "password" ) @@ -125,6 +127,7 @@ func RecommendedAuthOverrideFlags(prefix string) AuthOverrideFlags { ClientCertificate: FlagInfo{prefix + FlagCertFile, "", "", "Path to a client certificate file for TLS."}, ClientKey: FlagInfo{prefix + FlagKeyFile, "", "", "Path to a client key file for TLS."}, Token: FlagInfo{prefix + FlagBearerToken, "", "", "Bearer token for authentication to the API server."}, + Impersonate: FlagInfo{prefix + FlagImpersonate, "", "", "Username to impersonate for the operation."}, Username: FlagInfo{prefix + FlagUsername, "", "", "Username for basic authentication to the API server."}, Password: FlagInfo{prefix + FlagPassword, "", "", "Password for basic authentication to the API server."}, } @@ -164,6 +167,7 @@ func BindAuthInfoFlags(authInfo *clientcmdapi.AuthInfo, flags *pflag.FlagSet, fl flagNames.ClientCertificate.BindStringFlag(flags, &authInfo.ClientCertificate) flagNames.ClientKey.BindStringFlag(flags, &authInfo.ClientKey) flagNames.Token.BindStringFlag(flags, &authInfo.Token) + flagNames.Impersonate.BindStringFlag(flags, &authInfo.Impersonate) flagNames.Username.BindStringFlag(flags, &authInfo.Username) flagNames.Password.BindStringFlag(flags, &authInfo.Password) } diff --git a/pkg/genericapiserver/genericapiserver.go b/pkg/genericapiserver/genericapiserver.go index f6006a037a93e..5ace9879974f5 100644 --- a/pkg/genericapiserver/genericapiserver.go +++ b/pkg/genericapiserver/genericapiserver.go @@ -578,6 +578,7 @@ func (s *GenericAPIServer) init(c *Config) { attributeGetter := apiserver.NewRequestAttributeGetter(s.RequestContextMapper, s.NewRequestInfoResolver()) handler = apiserver.WithAuthorizationCheck(handler, attributeGetter, s.authorizer) + handler = apiserver.WithActingAs(handler, s.RequestContextMapper, s.authorizer) // Install Authenticator if c.Authenticator != nil { diff --git a/test/integration/auth_test.go b/test/integration/auth_test.go index 32b1cf793f784..55df0a8f4bf26 100644 --- a/test/integration/auth_test.go +++ b/test/integration/auth_test.go @@ -725,6 +725,87 @@ func TestUnknownUserIsUnauthorized(t *testing.T) { } } +type impersonateAuthorizer struct{} + +// alice can't act as anyone and bob can't do anything but act-as someone +func (impersonateAuthorizer) Authorize(a authorizer.Attributes) error { + if a.GetUserName() == "alice" && a.GetVerb() != "impersonate" { + return nil + } + if a.GetUserName() == "bob" && a.GetVerb() == "impersonate" { + return nil + } + return errors.New("I can't allow that. Go ask alice.") +} + +func TestImpersonateIsForbidden(t *testing.T) { + framework.DeleteAllEtcdKeys() + + var m *master.Master + s := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, req *http.Request) { + m.Handler.ServeHTTP(w, req) + })) + defer s.Close() + + masterConfig := framework.NewIntegrationTestMasterConfig() + masterConfig.Authenticator = getTestTokenAuth() + masterConfig.Authorizer = impersonateAuthorizer{} + m, err := master.New(masterConfig) + if err != nil { + t.Fatalf("error in bringing up the master: %v", err) + } + + transport := http.DefaultTransport + + for _, r := range getTestRequests() { + token := BobToken + bodyBytes := bytes.NewReader([]byte(r.body)) + req, err := http.NewRequest(r.verb, s.URL+r.URL, bodyBytes) + if err != nil { + t.Fatalf("unexpected error: %v", err) + } + req.Header.Set("Authorization", fmt.Sprintf("Bearer %s", token)) + + func() { + resp, err := transport.RoundTrip(req) + defer resp.Body.Close() + if err != nil { + t.Logf("case %v", r) + t.Fatalf("unexpected error: %v", err) + } + // Expect all of bob's actions to return Forbidden + if resp.StatusCode != http.StatusForbidden { + t.Logf("case %v", r) + t.Errorf("Expected not status Forbidden, but got %s", resp.Status) + } + }() + } + + for _, r := range getTestRequests() { + token := BobToken + bodyBytes := bytes.NewReader([]byte(r.body)) + req, err := http.NewRequest(r.verb, s.URL+r.URL, bodyBytes) + if err != nil { + t.Fatalf("unexpected error: %v", err) + } + req.Header.Set("Authorization", fmt.Sprintf("Bearer %s", token)) + req.Header.Set("Impersonate-User", "alice") + func() { + resp, err := transport.RoundTrip(req) + defer resp.Body.Close() + if err != nil { + t.Logf("case %v", r) + t.Fatalf("unexpected error: %v", err) + } + // Expect all the requests to be allowed, don't care what they actually do + if resp.StatusCode == http.StatusForbidden { + t.Logf("case %v", r) + t.Errorf("Expected status not %v, but got %v", http.StatusForbidden, resp.StatusCode) + } + }() + } +} + func newAuthorizerWithContents(t *testing.T, contents string) authorizer.Authorizer { f, err := ioutil.TempFile("", "auth_test") if err != nil {