Skip to content

Commit e60b287

Browse files
Update content/en/docs/tasks/access-application-cluster/port-forward-access-application-cluster.md
Co-authored-by: Nate W <natew@cncf.io>
1 parent 59d63a0 commit e60b287

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

content/en/docs/tasks/access-application-cluster/port-forward-access-application-cluster.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -211,7 +211,7 @@ The support for UDP protocol is tracked in
211211

212212
Access to `kubectl port-forward` is controlled by Kubernetes authorization mechanisms like {{< glossary_tooltip text="Role-Based Access Control (RBAC)" term_id="rbac" >}}. Authorization is enforced by the Kubernetes API server, not by the `kubectl` client.
213213

214-
To use `kubectl port-forward`, a user must have permission to access the target resource (for example, a Pod or Service) and the `portforward` subresource. Typical required permissions include `get` on pods and `create` on `pods/portforward`.
214+
To use `kubectl port-forward`, a user must have permission to access the target resource (for example, a Pod or Service) and the `portforward` subresource. Typical required permissions include `get` on `pods` and `create` on `pods/portforward`.
215215

216216
Cluster administrators should carefully restrict these permissions, as port-forwarding can provide direct network access to workloads and may bypass network-level controls.
217217

0 commit comments

Comments
 (0)