37 lines
1.3 KiB
Markdown
37 lines
1.3 KiB
Markdown
|
# kubectl proxy
|
||
|
|
|
||
|
|
> Create a proxy server or application-level gateway between localhost and the Kubernetes API server.
|
||
|
|
> More information: <https://kubernetes.io/docs/reference/kubectl/generated/kubectl_proxy/>.
|
||
|
|
|
||
|
|
- Run a proxy using the default settings on port 8001 and listen on localhost:
|
||
|
|
|
||
|
|
`kubectl proxy`
|
||
|
|
|
||
|
|
- Proxy part of the Kubernetes API while serving static files from a local directory:
|
||
|
|
|
||
|
|
`kubectl proxy {{[-w|--www]}} {{path/to/static_dir}} {{[-P|--www-prefix]}} {{/static_prefix/}} --api-prefix {{/api_subset/}}`
|
||
|
|
|
||
|
|
- Proxy the entire Kubernetes API under a custom prefix:
|
||
|
|
|
||
|
|
`kubectl proxy --api-prefix {{/custom_prefix/}}`
|
||
|
|
|
||
|
|
- Serve the Kubernetes API on a specific port while also serving static content:
|
||
|
|
|
||
|
|
`kubectl proxy {{[-p|--port]}} {{port}} {{[-w|--www]}} {{path/to/static_dir}}`
|
||
|
|
|
||
|
|
- Run a proxy on a random local port, printing the chosen port to `stdout`:
|
||
|
|
|
||
|
|
`kubectl proxy {{[-p|--port]}} 0`
|
||
|
|
|
||
|
|
- Run the proxy on a Unix domain socket instead of a TCP port:
|
||
|
|
|
||
|
|
`kubectl proxy {{[-u|--unix-socket]}} {{path/to/socket}}`
|
||
|
|
|
||
|
|
- Accept connections from remote hosts by listening on all interfaces (use caution when exposing the proxy publicly):
|
||
|
|
|
||
|
|
`kubectl proxy --address 0.0.0.0 --accept-hosts '.*'`
|
||
|
|
|
||
|
|
- Allow only selected API paths while rejecting sensitive endpoints:
|
||
|
|
|
||
|
|
`kubectl proxy --accept-paths '^/api/v1/namespaces/default/.*' --reject-paths '^/api/.*/pods/.*/exec'`
|