From 08ea67334e1cd664c9f3c34be9a51c0f216183aa Mon Sep 17 00:00:00 2001 From: Micah Hausler Date: Tue, 20 Aug 2024 13:21:55 -0500 Subject: [PATCH] Include additional verbs to can-i --- staging/src/k8s.io/kubectl/pkg/cmd/auth/cani.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/staging/src/k8s.io/kubectl/pkg/cmd/auth/cani.go b/staging/src/k8s.io/kubectl/pkg/cmd/auth/cani.go index 473f8bb0f5f..9f055a16933 100644 --- a/staging/src/k8s.io/kubectl/pkg/cmd/auth/cani.go +++ b/staging/src/k8s.io/kubectl/pkg/cmd/auth/cani.go @@ -105,7 +105,7 @@ var ( # List all allowed actions in namespace "foo" kubectl auth can-i --list --namespace=foo`) - resourceVerbs = sets.NewString("get", "list", "watch", "create", "update", "patch", "delete", "deletecollection", "use", "bind", "impersonate", "*", "approve") + resourceVerbs = sets.NewString("get", "list", "watch", "create", "update", "patch", "delete", "deletecollection", "use", "bind", "impersonate", "*", "approve", "sign", "escalate", "attest") nonResourceURLVerbs = sets.NewString("get", "put", "post", "head", "options", "delete", "patch", "*") // holds all the server-supported resources that cannot be discovered by clients. i.e. users and groups for the impersonate verb nonStandardResourceNames = sets.NewString("users", "groups")