DOT-Files/Gentoo/gentooamd/home/user/.tldrc/tldr/pages/common/kubectl-proxy.md

kubectl proxy

Create a proxy server or application-level gateway between localhost and the Kubernetes API server. More information: https://kubernetes.io/docs/reference/kubectl/generated/kubectl_proxy/.

• Run a proxy using the default settings on port 8001 and listen on localhost:

kubectl proxy

• Proxy part of the Kubernetes API while serving static files from a local directory:

kubectl proxy {{[-w|--www]}} {{path/to/static_dir}} {{[-P|--www-prefix]}} {{/static_prefix/}} --api-prefix {{/api_subset/}}

• Proxy the entire Kubernetes API under a custom prefix:

kubectl proxy --api-prefix {{/custom_prefix/}}

• Serve the Kubernetes API on a specific port while also serving static content:

kubectl proxy {{[-p|--port]}} {{port}} {{[-w|--www]}} {{path/to/static_dir}}

• Run a proxy on a random local port, printing the chosen port to stdout:

kubectl proxy {{[-p|--port]}} 0

• Run the proxy on a Unix domain socket instead of a TCP port:

kubectl proxy {{[-u|--unix-socket]}} {{path/to/socket}}

• Accept connections from remote hosts by listening on all interfaces (use caution when exposing the proxy publicly):

kubectl proxy --address 0.0.0.0 --accept-hosts '.*'

• Allow only selected API paths while rejecting sensitive endpoints:

kubectl proxy --accept-paths '^/api/v1/namespaces/default/.*' --reject-paths '^/api/.*/pods/.*/exec'