Can you specify the exact RBAC required about kubectl-df-pv

[fabiorauber]

I believe this is sufficient:

apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: dfpv-role
rules:
- apiGroups: [""]
  resources: 
    - namespaces
    - pods
    - nodes
    - nodes/proxy
  verbs: ["get", "list"]

[yashbhutwala]

Yup, @ketankr9 check out: https://github.com/yashbhutwala/kubectl-df-pv#requirements !! If that's not clear enough, please free to send a PR.

[ketankr9]

Checked it already, it just says appropriate RBAC. I was hoping there would be definite permission narrower than cluster-admin.

[yashbhutwala]

"specifically, you need a service account with enough RBAC privileges to access api/v1/nodes/ from the kube-apiserver"... I didn't exactly explore what the yaml for that looks like, so you would have to play with the rbac yaml https://kubernetes.io/docs/reference/access-authn-authz/rbac/

[ketankr9]

You are right @fabiorauber permission over resource nodes/proxy worked for me 👍 . Forgot to update this thread.