Restrictions

If the Admin Service is secured with OAuth, you can limit the execution of individual commands by the user roles.

Use the restrictions.requiredUserRoles property to specify the roles a user must hold in order to execute the command. In the following example, the delete command is restricted to users who have the Admin role:

command:
  name: delete
  description: Delete Everything
restrictions:
  requiredUserRoles:
    - Admin
resourceSelector:
  kind: pods
executor:
  executeOnPod:
    command:
      - "bin/bash"
      - "-c"
      - "rm -rf /"