Skip to content

Instantly share code, notes, and snippets.

@kingdonb
Created January 18, 2020 05:04
Show Gist options
  • Save kingdonb/67e3497b0d702327ce4df3657dec6ccf to your computer and use it in GitHub Desktop.
Save kingdonb/67e3497b0d702327ce4df3657dec6ccf to your computer and use it in GitHub Desktop.
21:06 -!- yebyen [[email protected]] has joined #honkctl-jan
21:06 -!- Topic for #honkctl-jan: https://gist.githubusercontent.com/jeefy/ee705f2838f237d46d2c8fd756abb395/raw/a866e3b207cd6d07bf2b145399a2ce85a30dd139/honkctl-jan
21:06 -!- Topic set by jeefy [uid114104@gateway/web/irccloud.com/x-zgoztgdtahgzdpfo] [Fri Jan 17 20:05:37 2020]
21:06 [Users #honkctl-jan]
21:06 [@jeefy ] [ brrrr ] [ honkctl ] [ swiggity_swooty] [ yebyen]
21:06 [@mrbobbytables] [ cprivite ] [ nyarison ] [ t168286 ]
21:06 [ bdimcheff[m] ] [ fronkchie] [ randohacker] [ TabSab ]
21:06 -!- Irssi: #honkctl-jan: Total of 13 nicks [2 ops, 0 halfops, 0 voices, 11 normal]
21:06 -!- Channel #honkctl-jan created Thu Jan 16 23:17:40 2020
21:06 -!- Irssi: Join to #honkctl-jan was synced in 0 secs
21:06 < fronkchie> !honkctl create rolebinding admin --clusterrole=admin --serviceaccount=garden:goose -n garden
21:06 < honkctl> Error from server (Forbidden): rolebindings.rbac.authorization.k8s.io is forbidden: User "system:serviceaccount:garden:goose" cannot create resource "rolebindings" in API group "rbac.authorization.k8s.io" in the namespace "garden"
21:06 < cprivite> !honkctl cluster-info
21:06 < honkctl> Error from server (Forbidden): services is forbidden: User "system:serviceaccount:garden:goose" cannot list resource "services" in API group "" in the namespace "kube-system"
21:06 < nyarison> !honkctl h=-h
21:06 < TabSab> !honkctl $USER
21:06 < honkctl> Error: unknown command "$USER" for "kubectl"
21:06 < honkctl> Run 'kubectl --help' for usage.
21:06 < cprivite> !honkctl logs
21:06 < honkctl> error: expected 'logs [-f] [-p] (POD | TYPE/NAME) [-c CONTAINER]'.
21:06 < honkctl> POD or TYPE/NAME is a required argument for the logs command
21:06 < honkctl> See 'kubectl logs -h' for help and examples
21:06 < nyarison> !honkctl -help
21:06 < honkctl> Cluster is still starting. Please wait for the response from first command.
21:06 < cprivite> !honkctl get po -A
21:06 < honkctl> Error from server (Forbidden): pods is forbidden: User "system:serviceaccount:garden:goose" cannot list resource "pods" in API group "" at the cluster scope
21:06 < TabSab> !honkctl get pods -n garden
21:06 < honkctl> NAME READY STATUS RESTARTS AGE
21:06 < honkctl> groundskeeper-59dc8b5fdf-tpl6h 1/1 Running 0 6m57s
21:06 < nyarison> !honkctl get ns
21:06 < honkctl> Cluster is still starting. Please wait for the response from first command.
21:07 < fronkchie> !honkctl get namespaces
21:07 -!- t168286 [[email protected]] has left #honkctl-jan []
21:07 < fronkchie> !honkctl get namespaces
21:07 < honkctl> NAME STATUS AGE
21:07 < honkctl> default Active 6m46s
21:07 < honkctl> garden Active 6m39s
21:07 < honkctl> home Active 6m39s
21:07 < honkctl> kube-node-lease Active 6m48s
21:07 < honkctl> kube-public Active 6m48s
21:07 < honkctl> kube-system Active 6m49s
21:07 < TabSab> !honkctl get pods -n garden -o wide
21:07 < honkctl> model-village Active 6m39s
21:07 < honkctl> pub
21:07 < honkctl> ...
21:07 < honkctl> NAME STATUS AGE
21:07 -!- swiggity_swooty [[email protected]] has quit [Remote host closed the connection]
21:07 < honkctl> default Active 6m46s
21:07 < honkctl> garden Active 6m39s
21:07 < honkctl> home Active 6m39s
21:07 < cprivite> !honkctl auth can-i --list
21:07 -!- swiggity_swooty [[email protected]] has joined #honkctl-jan
21:07 < brrrr> !honkctl get pods
21:07 < TabSab> !honkctl get pods -n garden -o json
21:07 < honkctl> "creationTimestamp": "2020-01-18T01:59:56Z",
21:07 < honkctl> "generateName": "groundskeeper-59dc8b5fdf-",
21:07 < honkctl> "
21:07 < honkctl> ...
21:07 < swiggity_swooty> !honkctl get ns
21:07 < honkctl> NAME STATUS AGE
21:07 < honkctl> default Active 7m42s
21:07 < nyarison> !honkctl auth can -i get
21:07 < honkctl> garden Active 7m37s
21:07 < honkctl> home Active 7m37s
21:07 < honkctl> kube-node-lease Active 7m44s
21:07 < honkctl> kube-public Active 7m44s
21:07 < honkctl> kube-system Active 7m44s
21:07 < honkctl> model-village Active 7m37s
21:07 < honkctl> pub
21:07 < honkctl> ...
21:07 < honkctl> Cluster is still starting. Please wait for the response from first command.
21:07 < brrrr> oh ffs
21:07 < swiggity_swooty> !honkctl get secrets --all-namespaces
21:07 < honkctl> Error from server (Forbidden): secrets is forbidden: User "system:serviceaccount:garden:goose" cannot list resource "secrets" in API group "" at the cluster scope
21:07 < fronkchie> !honkctl get secrets garden
21:07 < honkctl> Error from server (Forbidden): secrets "garden" is forbidden: User "system:serviceaccount:garden:goose" cannot get resource "secrets" in API group "" in the namespace "garden"
21:07 < honkctl> Client Version: version.Info{Major:"1", Minor:"17", GitVersion:"v1.17.0", GitCommit:"70132b0f130acc0bed193d9ba59dd186f0e634cf", GitTreeState:"clean", BuildDate:"2019-12-07T21:20:10Z", GoVersion:"go1.13.4", Compiler:"gc", Platform:"linux/amd64"}
21:07 < honkctl> Server Version: version.Info{M
21:07 < honkctl> ...
21:07 < nyarison> !honkctl list secrets -n default
21:07 < honkctl> Error: unknown command "list" for "kubectl"
21:07 < honkctl> Did you mean this?
21:07 < honkctl> get
21:07 < honkctl> wait
21:07 < honkctl> Run 'kubectl --help' for usage.
21:08 < fronkchie> !honkctl get secrets -n garden
21:08 < honkctl> Error from server (Forbidden): secrets is forbidden: User "system:serviceaccount:garden:goose" cannot list resource "secrets" in API group "" in the namespace "garden"
21:08 < nyarison> !honkctl get secrets -n default
21:08 < honkctl> NAME TYPE DATA AGE
21:08 < honkctl> default-token-6jd5w kubernetes.io/service-account-token 3 28s
21:08 < swiggity_swooty> !honkctl auth can-i list secrets
21:08 < honkctl> no
21:08 < swiggity_swooty> !honkctl auth can-i list cm
21:08 < honkctl> yes
21:08 < cprivite> !honkctl get secrets -n garden
21:08 < honkctl> Error from server (Forbidden): secrets is forbidden: User "system:serviceaccount:garden:goose" cannot list resource "secrets" in API group "" in the namespace "garden"
21:08 < swiggity_swooty> !honkctl get cm --all-namespaces
21:08 < honkctl> Error from server (Forbidden): configmaps is forbidden: User "system:serviceaccount:garden:goose" cannot list resource "configmaps" in API group "" at the cluster scope
21:08 < nyarison> !honkctl config show
21:08 < honkctl> error: unknown command "show"
21:08 < honkctl> See 'kubectl config -h' for help and examples
21:08 < fronkchie> !honkctl get secrets -n kube-system
21:08 < honkctl> Error from server (Forbidden): secrets is forbidden: User "system:serviceaccount:garden:goose" cannot list resource "secrets" in API group "" in the namespace "kube-system"
21:08 < nyarison> !honkctl config get
21:08 < honkctl> error: unknown command "get"
21:08 < honkctl> See 'kubectl config -h' for help and examples
21:08 < brrrr> !honkctl do you even work yet
21:08 < honkctl> Error: unknown command "do" for "kubectl"
21:08 < honkctl> Did you mean this?
21:08 < honkctl> top
21:08 < honkctl> cp
21:08 < honkctl> Run 'kubectl --help' for usage.
21:08 < swiggity_swooty> !honkctl get secrets -n garden
21:08 < honkctl> Error from server (Forbidden): secrets is forbidden: User "system:serviceaccount:garden:goose" cannot list resource "secrets" in API group "" in the namespace "garden"
21:08 < nyarison> !honckctl config current-context
21:09 < nyarison> lol
21:09 -!- fraq [sid340023@gateway/web/irccloud.com/x-gyscfkudkgmeiqrt] has joined #honkctl-jan
21:09 < swiggity_swooty> !honkctl get secrets -n home
21:09 < honkctl> Error from server (Forbidden): secrets is forbidden: User "system:serviceaccount:garden:goose" cannot list resource "secrets" in API group "" in the namespace "home"
21:09 < brrrr> !honkctl get ns
21:09 < honkctl> NAME STATUS AGE
21:09 < honkctl> default Active 3m47s
21:09 < honkctl> garden Active 3m37s
21:09 < honkctl> home Active 3m37s
21:09 < honkctl> kube-node-lease Active 3m49s
21:09 < honkctl> kube-public Active 3m49s
21:09 < honkctl> kube-system Active 3m49s
21:09 < fronkchie> !honkctl get pods model-village
21:09 < honkctl> model-village Active 3m37s
21:09 < honkctl> pub
21:09 < cprivite> !honkctl get po -n garden
21:09 < honkctl> ...
21:09 < honkctl> Error from server (NotFound): pods "model-village" not found
21:09 < honkctl> NAME READY STATUS RESTARTS AGE
21:09 < honkctl> groundskeeper-59dc8b5fdf-tx8mm 1/1 Running 0 11m
21:09 < fronkchie> !honkctl get pods -n model-village
21:09 < honkctl> Error from server (Forbidden): pods is forbidden: User "system:serviceaccount:garden:goose" cannot list resource "pods" in API group "" in the namespace "model-village"
21:09 < swiggity_swooty> !honkctl get po -n garden -oyaml
21:09 < honkctl> apiVersion: v1
21:09 < honkctl> items:
21:09 < honkctl> - apiVersion: v1
21:09 < honkctl> kind: Pod
21:09 < honkctl> metadata:
21:09 < honkctl> creationTimestamp: "2020-01-18T01:59:59Z"
21:09 < honkctl> generateName: groundskeeper-59dc8b5fdf-
21:09 < honkctl> labels:
21:09 < honkctl> pod-template-hash: 59dc8b5fdf
21:09 < honkctl> rake: "true"
21:09 < honkctl> name: groundskeeper-59dc8b5fdf-nlcbs
21:09 < cprivite> !honkctl exec -it -- /bin/bash groundskeeper-59dc8b5fdf-tx8mm
21:09 < honkctl> namespace:
21:09 < cprivite> !honkctl ls
21:09 -!- honkctl [[email protected]] has quit [Excess Flood]
21:09 < yebyen> honkctl describe po -n garden groundskeeper-59dc8b5fdf-tx8mm
21:09 < yebyen> !honkctl describe po -n garden groundskeeper-59dc8b5fdf-tx8mm
21:09 <@jeefy> Welp.
21:09 < fraq> lol
21:09 -!- honkctl [[email protected]] has joined #honkctl-jan
21:09 <@jeefy> I knew it was going to happen eventually.
21:09 < honkctl> Error: unknown command "h=-h" for "kubectl"
21:09 < honkctl> Run 'kubectl --help' for usage.
21:10 <@jeefy> Luckily it comes back on its own.
21:10 < fronkchie> !honkctl get po -n garden -oyaml
21:10 < honkctl> apiVersion: v1
21:10 < honkctl> items:
21:10 < honkctl> - apiVersion: v1
21:10 < honkctl> kind: Pod
21:10 < honkctl> metadata:
21:10 < honkctl> creationTimestamp: "2020-01-18T02:00:36Z"
21:10 < honkctl> generateName: groundskeeper-59dc8b5fdf-
21:10 < honkctl> labels:
21:10 < honkctl> pod-template-hash: 59dc8b5fdf
21:10 < honkctl> rake: "true"
21:10 < honkctl> name: groundskeeper-59dc8b5fdf-6s9s4
21:10 < honkctl> namespace:
21:10 < honkctl> ...
21:10 < fronkchie> !honkctl get po -n garden
21:10 < randohacker> !honkctl apply -f https://gist.githubusercontent.com/jleadford/beb242c3628c82117f510dae42e3279a/raw/a163aac10cf0c13d92d760cf98beb1f810462611/privpod.yaml
21:10 < honkctl> NAME READY STATUS RESTARTS AGE
21:10 < honkctl> groundskeeper-59dc8b5fdf-6s9s4 1/1 Running 0 10m
21:10 < honkctl> Error from server (Forbidden): error when creating "https://gist.githubusercontent.com/jleadford/beb242c3628c82117f510dae42e3279a/raw/a163aac10cf0c13d92d760cf98beb1f810462611/privpod.yaml": pods is forbidden: User "system:serviceaccount:garden:goose" cannot create resource "
21:10 < honkctl> ...
21:11 < swiggity_swooty> !honkctl label --overwrite po groundskeeper-59dc8b5fdf-nlcbs rake=false -n garden
21:11 < honkctl> Error from server (Forbidden): pods "groundskeeper-59dc8b5fdf-nlcbs" is forbidden: User "system:serviceaccount:garden:goose" cannot patch resource "pods" in API group "" in the namespace "garden"
21:11 < cprivite> lol exactly what i wanted to do
21:11 < nyarison> !honkctl kubectl get pod -o wide
21:11 < honkctl> Error: unknown command "kubectl" for "kubectl"
21:11 < honkctl> Run 'kubectl --help' for usage.
21:11 < nyarison> !honkctl kubectl get pod -o wide
21:11 < honkctl> Error: unknown command "kubectl" for "kubectl"
21:11 < honkctl> Run 'kubectl --help' for usage.
21:11 < nyarison> !honkctl get pod -o wide
21:11 < honkctl> NAME READY STATUS RESTARTS AGE IP NODE NOMINATED NODE READINESS GATES
21:11 < honkctl> groundskeeper-59dc8b5fdf-crbmg 1/1 Running 0 4m2s 10.244.0.3 nyarison-control-plane <none> <none>
21:11 < cprivite> !honkctl exec -it -- /bin/bash groundskeeper-59dc8b5fdf-tx8mm
21:11 < honkctl> Disabled for reasons. Honk.
21:11 < TabSab> !honkctl get pods -n garden -o wide
21:11 < honkctl> NAME READY STATUS RESTARTS AGE IP NODE NOMINATED NODE READINESS GATES
21:11 < honkctl> groundskeeper-59dc8b5fdf-tpl6h 1/1 Running 0 11m 10.244.0.5 tabsab-control-plane <none> <none>
21:11 < swiggity_swooty> !honkctl get all -n garden
21:11 < honkctl> NAME READY STATUS RESTARTS AGE
21:11 < honkctl> pod/groundskeeper-59dc8b5fdf-nlcbs 1/1 Running 0 11m
21:11 < honkctl> NAME READY UP-TO-DATE AVAILABLE AGE
21:11 < honkctl> deployment.apps/groundskeeper 1/1 1 1
21:11 < honkctl> ...
21:12 < cprivite> !honkctl get namespace
21:12 < honkctl> NAME STATUS AGE
21:12 < honkctl> default Active 14m
21:12 < honkctl> garden Active 14m
21:12 < honkctl> home Active 14m
21:12 < honkctl> kube-node-lease Active 14m
21:12 < honkctl> kube-public Active 14m
21:12 < honkctl> kube-system Active 14m
21:12 < honkctl> model-village Active 14m
21:12 < honkctl> pub Active 14m
21:12 < swiggity_swooty> !honkctl auth can-i patch deploy
21:12 < honkctl> no
21:12 < cprivite> !honkctl get po -n pub
21:12 < honkctl> Error from server (Forbidden): pods is forbidden: User "system:serviceaccount:garden:goose" cannot list resource "pods" in API group "" in the namespace "pub"
21:12 < cprivite> !honkctl get po -n model-village
21:12 < honkctl> Error from server (Forbidden): pods is forbidden: User "system:serviceaccount:garden:goose" cannot list resource "pods" in API group "" in the namespace "model-village"
21:12 < TabSab> !honkctl exec groundskeeper-59dc8b5fdf-tpl6h whoami
21:12 < honkctl> Disabled for reasons. Honk.
21:12 < cprivite> !honkctl get po -n kube-system
21:12 < honkctl> Error from server (Forbidden): pods is forbidden: User "system:serviceaccount:garden:goose" cannot list resource "pods" in API group "" in the namespace "kube-system"
21:12 < cprivite> !honkctl get po -n kube-public
21:12 < honkctl> Error from server (Forbidden): pods is forbidden: User "system:serviceaccount:garden:goose" cannot list resource "pods" in API group "" in the namespace "kube-public"
21:12 < nyarison> !honkctl get service --all-namespaces
21:12 < honkctl> Error from server (Forbidden): services is forbidden: User "system:serviceaccount:garden:goose" cannot list resource "services" in API group "" at the cluster scope
21:12 < cprivite> !honkctl get po -n home
21:12 < honkctl> No resources found in home namespace.
21:12 < cprivite> !honkctl get po -n default
21:12 < honkctl> Error from server (Forbidden): pods is forbidden: User "system:serviceaccount:garden:goose" cannot list resource "pods" in API group "" in the namespace "default"
21:12 < cprivite> !honkctl get po -n garden
21:12 < honkctl> NAME READY STATUS RESTARTS AGE
21:12 < honkctl> groundskeeper-59dc8b5fdf-tx8mm 1/1 Running 0 15m
21:13 < nyarison> !honkctl describe groundskeeper-59dc8b5fdf-tx8mm -n garden
21:13 < honkctl> error: the server doesn't have a resource type "groundskeeper-59dc8b5fdf-tx8mm"
21:13 < nyarison> !honkctl describe pod groundskeeper-59dc8b5fdf-tx8mm -n garden
21:13 < honkctl> Error from server (NotFound): pods "groundskeeper-59dc8b5fdf-tx8mm" not found
21:13 < swiggity_swooty> !honkctl decribe pods -n garden
21:13 < honkctl> Error: unknown command "decribe" for "kubectl"
21:13 < honkctl> Did you mean this?
21:13 < honkctl> describe
21:13 < honkctl> Run 'kubectl --help' for usage.
21:13 < swiggity_swooty> !honkctl describe pods -n garden
21:13 < honkctl> Name: groundskeeper-59dc8b5fdf-nlcbs
21:13 < honkctl> Namespace: garden
21:13 < honkctl> Priority: 0
21:13 < honkctl> Node: swiggityswooty-control-plane/172.17.0.7
21:13 < honkctl> Start Time: Sat, 18 Jan 2020 02:00:09 +0000
21:13 < nyarison> thanks
21:13 < honkctl> Labels: pod-template-hash=59dc8b5fdf
21:13 < honkctl> rake=true
21:13 < honkctl> Annotations: <none>
21:13 < honkctl> Statu
21:13 < honkctl> ...
21:13 < nyarison> truncated
21:13 < swiggity_swooty> !honkctl auth can-i delete pods
21:13 < honkctl> no
21:13 < swiggity_swooty> !honkctl auth can-i delete deploy
21:13 < honkctl> no
21:13 < swiggity_swooty> !honkctl get psp
21:13 < honkctl> Error from server (Forbidden): podsecuritypolicies.policy is forbidden: User "system:serviceaccount:garden:goose" cannot list resource "podsecuritypolicies" in API group "policy" at the cluster scope
21:14 < randohacker> !honkctl get secrets -n garden
21:14 < honkctl> Error from server (Forbidden): secrets is forbidden: User "system:serviceaccount:garden:goose" cannot list resource "secrets" in API group "" in the namespace "garden"
21:14 < fronkchie> !honkctl exec -- /bin/bash ls / groundskeeper-59dc8b5fdf-tx8mm
21:14 < honkctl> Disabled for reasons. Honk.
21:14 < fronkchie> dammit
21:14 <@jeefy> honk
21:15 < swiggity_swooty> !honkctl auth can-i --list
21:15 < honkctl> Resources Non-Resource URLs Resource Names Verbs
21:15 < honkctl> selfsubjectaccessreviews.authorization.k8s.io [] [] [create]
21:15 < honkctl> selfsubjectrulesreviews.authorization.k8s.io [] []
21:15 < honkctl> ...
21:15 < bdimcheff[m]> honk
21:15 < fronkchie> kubectl auth can-i create deployments --namespace garden
21:15 < nyarison> !honkctl get jobs -all-namespaces
21:15 < honkctl> Error: unknown shorthand flag: 'a' in -all-namespaces
21:15 < honkctl> See 'kubectl get --help' for usage.
21:15 < fronkchie> !honkctl auth can-i create deployments --namespace garden
21:15 < honkctl> no
21:15 < swiggity_swooty> !honkctl get crd
21:15 < honkctl> NAME CREATED AT
21:15 < honkctl> todos.honk.ci 2020-01-18T01:59:53Z
21:15 < cprivite> !honkctl api-resources
21:15 < honkctl> NAME SHORTNAMES APIGROUP NAMESPACED KIND
21:15 < honkctl> bindings true Binding
21:15 < honkctl> componentstatuses cs fa
21:15 < honkctl> ...
21:15 < swiggity_swooty> !honkctl get todos
21:15 < nyarison> !honkctl get jobs --all-namespaces
21:15 < yebyen> !honkctl get todos
21:15 < honkctl> NAME TODO
21:15 < honkctl> todo-1 Steal the groundskeepers keys.
21:15 < honkctl> todo-2 Get to the Pub.
21:15 < honkctl> todo-3 Get into the model-village.
21:15 < honkctl> todo-4 Steal the beautiful minature golden bell.
21:15 < honkctl> todo-5 ...and take it all the way back home.
21:15 < honkctl> Error from server (Forbidden): jobs.batch is forbidden: User "system:serviceaccount:garden:goose" cannot list resource "jobs" in API group "batch" at the cluster scope
21:16 < nyarison> !honkctl get jobs --all-namespaces
21:16 < honkctl> Error from server (Forbidden): jobs.batch is forbidden: User "system:serviceaccount:garden:goose" cannot list resource "jobs" in API group "batch" at the cluster scope
21:16 < nyarison> !honkctl get jobs -n garden
21:16 < honkctl> No resources found in garden namespace.
21:16 < cprivite> !honkctl get crd
21:16 < honkctl> NAME CREATED AT
21:16 < honkctl> todos.honk.ci 2020-01-18T01:57:29Z
21:16 < swiggity_swooty> !honkctl get crd -oyaml
21:16 < honkctl> apiVersion: v1
21:16 < honkctl> items:
21:16 < honkctl> - apiVersion: apiextensions.k8s.io/v1
21:16 < honkctl> kind: CustomResourceDefinition
21:16 < honkctl> metadata:
21:16 < honkctl> annotations:
21:16 < honkctl> kubectl.kubernetes.io/last-applied-configuration: |
21:16 < honkctl> {"apiVersion":"apiextensions.k8s.io/v1","kind":"CustomResourceDefinition","metadata":{"
21:16 < honkctl> ...
21:16 < cprivite> !honkctl get crd -n garden
21:16 < honkctl> NAME CREATED AT
21:16 < honkctl> todos.honk.ci 2020-01-18T01:57:29Z
21:16 < nyarison> !honkctl describe job -n garden
21:16 < cprivite> !honkctl get jobs
21:16 < honkctl> No resources found in garden namespace.
21:16 < swiggity_swooty> honkctl get selfsubjectrulesreviews
21:17 < cprivite> !honkctl get todos
21:17 < honkctl> NAME TODO
21:17 < honkctl> todo-1 Steal the groundskeepers keys.
21:17 < honkctl> todo-2 Get to the Pub.
21:17 < honkctl> todo-3 Get into the model-village.
21:17 < honkctl> todo-4 Steal the beautiful minature golden bell.
21:17 < honkctl> todo-5 ...and take it all the way back home.
21:17 < swiggity_swooty> honkctl get selfsubjectrulesreviews -n kube-system
21:17 < cprivite> kubectl get po -n garden
21:17 < cprivite> !honkctl get po -n garden
21:17 < honkctl> NAME READY STATUS RESTARTS AGE
21:17 < honkctl> groundskeeper-59dc8b5fdf-tx8mm 1/1 Running 0 19m
21:17 < cprivite> !honkctl describe groundskeeper-59dc8b5fdf-tx8mm
21:17 < swiggity_swooty> !honkctl get keys
21:17 < honkctl> error: the server doesn't have a resource type "groundskeeper-59dc8b5fdf-tx8mm"
21:17 < honkctl> error: the server doesn't have a resource type "keys"
21:17 < cprivite> !honkctl get -o wide groundskeeper-59dc8b5fdf-tx8mm
21:17 < honkctl> error: the server doesn't have a resource type "groundskeeper-59dc8b5fdf-tx8mm"
21:17 < swiggity_swooty> !honkctl get nodes
21:17 < honkctl> Error from server (Forbidden): nodes is forbidden: User "system:serviceaccount:garden:goose" cannot list resource "nodes" in API group "" at the cluster scope
21:17 < cprivite> !honkctl describe pod groundskeeper-59dc8b5fdf-tx8mm
21:17 < honkctl> Name: groundskeeper-59dc8b5fdf-tx8mm
21:17 < honkctl> Namespace: garden
21:17 < honkctl> Priority: 0
21:17 < honkctl> Node: cprivite-control-plane/172.17.0.4
21:17 < honkctl> Start Time: Sat, 18 Jan 2020 02:00:10 +0000
21:17 < honkctl> Labels: pod-template-hash=59dc8b5fdf
21:18 < honkctl> rake=true
21:18 < honkctl> Annotations: <none>
21:18 < honkctl> Status:
21:18 < honkctl> ...
21:18 < swiggity_swooty> !honkctl auth can-i --list
21:18 < honkctl> Resources Non-Resource URLs Resource Names Verbs
21:18 < honkctl> selfsubjectaccessreviews.authorization.k8s.io [] [] [create]
21:18 < honkctl> selfsubjectrulesreviews.authorization.k8s.io [] []
21:18 < honkctl> ...
21:18 < yebyen> !honkctl can-i delete pods
21:18 < honkctl> Error: unknown command "can-i" for "kubectl"
21:18 < honkctl> Run 'kubectl --help' for usage.
21:18 < yebyen> !honkctl auth can-i delete pods
21:18 < honkctl> Unable to connect to the server: EOF
21:18 < swiggity_swooty> !honkctl auth can-i --list --subresource pod
21:18 < honkctl> error: list option can't be specified with neither quiet, all-namespaces nor subresource options
21:18 < randohacker> !honkctl logs groundskeeper-59dc8b5fdf-tx8mm -n garden
21:18 < honkctl> Error from server (NotFound): pods "groundskeeper-59dc8b5fdf-tx8mm" not found
21:18 < swiggity_swooty> !honkctl auth can-i --subresource pod
21:18 < honkctl> error: you must specify two or three arguments: verb, resource, and optional resourceName
21:19 < nyarison> !honkctl get secret -n garden
21:19 < honkctl> Error from server (Forbidden): secrets is forbidden: User "system:serviceaccount:garden:goose" cannot list resource "secrets" in API group "" in the namespace "garden"
21:19 < swiggity_swooty> !honkctl get pods -n garden
21:19 < honkctl> NAME READY STATUS RESTARTS AGE
21:19 < honkctl> groundskeeper-59dc8b5fdf-nlcbs 1/1 Running 0 19m
21:19 < fronkchie> !honkctl config set-context --current --namespace=pub
21:19 < honkctl> Context "goose-garden-kind-fronkchie" modified.
21:19 < randohacker> !honkctl get pods -n garden
21:19 < honkctl> NAME READY STATUS RESTARTS AGE
21:19 < honkctl> groundskeeper-59dc8b5fdf-jl97s 1/1 Running 0 20m
21:19 < nyarison> !honkctl get pods -n garden
21:19 < honkctl> NAME READY STATUS RESTARTS AGE
21:19 < honkctl> groundskeeper-59dc8b5fdf-crbmg 1/1 Running 0 11m
21:19 < fronkchie> !honkctl get pods
21:19 < honkctl> Error from server (Forbidden): pods is forbidden: User "system:serviceaccount:garden:goose" cannot list resource "pods" in API group "" in the namespace "pub"
21:19 < cprivite> !honkctl get keys
21:19 < honkctl> error: the server doesn't have a resource type "keys"
21:19 < cprivite> !honkctl get rake
21:19 < honkctl> error: the server doesn't have a resource type "rake"
21:19 < nyarison> !honkctl get logs groundskeeper-59dc8b5fdf-crbmg -n garden
21:19 < randohacker> !honkctl logs groundskeeper-59dc8b5fdf-jl97s
21:19 < honkctl> error: the server doesn't have a resource type "logs"
21:19 < honkctl> 2020/01/18 02:01:24 [alert] 1#1: worker process 6 exited on signal 9
21:19 < honkctl> 2020/01/18 02:01:28 [alert] 1#1: worker process 7 exited on signal 9
21:19 < honkctl> 2020/01/18 02:01:37 [alert] 1#1: worker process 8 exited on signal 9
21:19 < honkctl> 2020/01/18 02:01:43 [alert] 1#1: worker process 9 exited on signal 9
21:19 < honkctl> ...
21:19 < swiggity_swooty> !honkctl log -l rake=true
21:19 < honkctl> Error: unknown command "log" for "kubectl"
21:19 < honkctl> Did you mean this?
21:19 < honkctl> top
21:19 < honkctl> logs
21:19 < honkctl> Run 'kubectl --help' for usage.
21:19 < yebyen> !honkctl delete pods groundskeeper-59dc8b5fdf-crbmg
21:19 < honkctl> Error from server (Forbidden): pods "groundskeeper-59dc8b5fdf-crbmg" is forbidden: User "system:serviceaccount:garden:goose" cannot delete resource "pods" in API group "" in the namespace "garden"
21:19 < nyarison> !honkctl get log groundskeeper-59dc8b5fdf-crbmg -n garden
21:19 < honkctl> NAME TODO
21:19 < honkctl> todo-1 Steal the groundskeepers keys.
21:19 < honkctl> todo-2 Get to the Pub.
21:19 < honkctl> todo-3 Get into the model-village.
21:19 < honkctl> todo-4 Steal the beautiful minature golden bell.
21:19 < honkctl> todo-5 ...and take it all the way back home.
21:19 < honkctl> error: the server doesn't have a resource type "log"
21:19 < swiggity_swooty> !honkctl logs -l rake=true -n garden
21:19 < honkctl> 2020/01/18 02:19:34 [alert] 91#91: epoll_ctl(1, 15) failed (9: Bad file descriptor)
21:19 < honkctl> 2020/01/18 02:19:34 [alert] 1#1: fork() failed while spawning "worker process" (12: Out of memory)
21:19 < honkctl> 2020/01/18 02:19:34 [alert] 1#1: could not respawn worker process
21:19 < honkctl> 2020/01/18 02:19:45 [alert
21:19 < honkctl> ...
21:19 < nyarison> lol
21:20 < fraq> i am _impressed_
21:20 < fronkchie> !honkctl config view
21:20 < honkctl> apiVersion: v1
21:20 < honkctl> clusters:
21:20 < honkctl> - cluster:
21:20 < honkctl> certificate-authority-data: DATA+OMITTED
21:20 < honkctl> server: https://127.0.0.1:45257
21:20 < honkctl> name: kind-fronkchie
21:20 < honkctl> contexts:
21:20 < honkctl> - context:
21:20 < honkctl> cluster: kind-fronkchie
21:20 < honkctl> namespace: pub
21:20 < honkctl> user: goose-garden-kind-fronkchie
21:20 < swiggity_swooty> easir than copy pasta in the chaos
21:20 < honkctl> name: goose-garden-kind-fro
21:21 < swiggity_swooty> nice
21:21 < nyarison> !honkctl get pods -n garden
21:21 < honkctl> NAME READY STATUS RESTARTS AGE
21:21 < honkctl> groundskeeper-59dc8b5fdf-crbmg 1/1 Running 0 13m
21:21 < swiggity_swooty> !honkctl config view
21:21 < honkctl> apiVersion: v1
21:21 < honkctl> clusters:
21:21 < honkctl> - cluster:
21:21 < honkctl> certificate-authority-data: DATA+OMITTED
21:21 < honkctl> server: https://127.0.0.1:35249
21:21 < honkctl> name: kind-swiggity_swooty
21:21 < honkctl> contexts:
21:21 < honkctl> - context:
21:21 < honkctl> cluster: kind-swiggity_swooty
21:21 < bdimcheff[m]> Wait does everyone get their own cluster?
21:21 < honkctl> namespace: garden
21:21 < honkctl> user: goose-garden-kind-swiggity_swooty
21:21 < honkctl> name:
21:21 < honkctl> ...
21:21 < swiggity_swooty> yes
21:21 <@mrbobbytables> yup
21:21 < nyarison> !honkctl get logs groundskeeper-59dc8b5fdf-crbmg -n garden
21:21 < cprivite> !honkctl get roels
21:21 < honkctl> error: the server doesn't have a resource type "logs"
21:21 < cprivite> !honkctl get roles
21:21 < honkctl> Error from server (Forbidden): roles.rbac.authorization.k8s.io is forbidden: User "system:serviceaccount:garden:goose" cannot list resource "roles" in API group "rbac.authorization.k8s.io" in the namespace "garden"
21:21 < honkctl> error: the server doesn't have a resource type "roels"
21:21 < nyarison> logs are real
21:21 < yebyen> !honkctl config view --raw
21:21 < honkctl> apiVersion: v1
21:21 < honkctl> clusters:
21:21 < honkctl> - cluster:
21:21 < honkctl> certificate-authority-data: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN5RENDQWJDZ0F3SUJBZ0lCQURBTkJna3Foa2lHOXcwQkFRc0ZBREFWTVJNd0VRWURWUVFERXdwcmRXSmwKY201bGRHVnpNQjRYRFRJd01ERXhPREF5TVRZd04xb1hEVE13TURFeE5UQXlNVFl3TjFvd0ZURVRNQkVHQTF
21:21 < honkctl> ...
21:21 < nyarison> lol
21:22 < swiggity_swooty> !honkctl get rolebindings -n garden
21:22 < honkctl> Error from server (Forbidden): rolebindings.rbac.authorization.k8s.io is forbidden: User "system:serviceaccount:garden:goose" cannot list resource "rolebindings" in API group "rbac.authorization.k8s.io" in the namespace "garden"
21:22 < swiggity_swooty> !honkctl get roles -n garden
21:22 < honkctl> Error from server (Forbidden): roles.rbac.authorization.k8s.io is forbidden: User "system:serviceaccount:garden:goose" cannot list resource "roles" in API group "rbac.authorization.k8s.io" in the namespace "garden"
21:22 < nyarison> !honkctl get -ns
21:22 < honkctl> You must specify the type of resource to get. Use "kubectl api-resources" for a complete list of supported resources.
21:22 < honkctl> error: Required resource not specified.
21:22 < honkctl> Use "kubectl explain <resource>" for a detailed description of that resource (e.g. kubectl explain pods).
21:22 < honkctl> See 'kubec
21:22 < honkctl> ...
21:22 < nyarison> !honkctl get ns
21:22 < honkctl> NAME STATUS AGE
21:22 < honkctl> default Active 15m
21:22 < honkctl> garden Active 15m
21:22 < honkctl> home Active 15m
21:22 < honkctl> kube-node-lease Active 15m
21:22 < honkctl> kube-public Active 15m
21:22 < honkctl> kube-system Active 15m
21:22 < honkctl> model-village Active 15m
21:22 < honkctl> pub Active 15m
21:23 < swiggity_swooty> !honkctl get apiversions
21:23 < honkctl> error: the server doesn't have a resource type "apiversions"
21:23 < swiggity_swooty> !honkctl api-versions
21:23 < honkctl> admissionregistration.k8s.io/v1
21:23 < honkctl> admissionregistration.k8s.io/v1beta1
21:23 < honkctl> apiextensions.k8s.io/v1
21:23 < honkctl> apiextensions.k8s.io/v1beta1
21:23 < honkctl> apiregistration.k8s.io/v1
21:23 < honkctl> apiregistration.k8s.io/v1beta1
21:23 < honkctl> apps/v1
21:23 < honkctl> authentication.k8s.io/v1
21:23 < honkctl> authentication.k8s.io/v1beta1
21:23 < honkctl> authorization.k8s.io/v1
21:23 < honkctl> authoriza
21:23 < honkctl> ...
21:23 < fronkchie> !honkctl config set-context --current --namespace=model-village
21:23 < honkctl> Context "goose-garden-kind-fronkchie" modified.
21:23 < fronkchie> !honkctl get pods
21:23 < honkctl> Error from server (Forbidden): pods is forbidden: User "system:serviceaccount:garden:goose" cannot list resource "pods" in API group "" in the namespace "model-village"
21:23 < cprivite> !honkctl config set-context --current --namespace=garden
21:23 < honkctl> Context "goose-garden-kind-cprivite" modified.
21:23 < cprivite> !honkctl get all
21:23 < honkctl> NAME READY STATUS RESTARTS AGE
21:23 < honkctl> pod/groundskeeper-59dc8b5fdf-tx8mm 1/1 Running 0 26m
21:23 < honkctl> NAME READY UP-TO-DATE AVAILABLE AGE
21:23 < honkctl> deployment.apps/groundskeeper 1/1 1 1
21:23 < honkctl> ...
21:23 < cprivite> !honkctl get crd
21:23 < honkctl> NAME CREATED AT
21:23 < honkctl> todos.honk.ci 2020-01-18T01:57:29Z
21:24 < swiggity_swooty> honkctl> Context "goose-garden-kind-fronkchie" modified.
21:24 < swiggity_swooty> honkctl> Context "goose-garden-kind-fronkchie" modified.
21:24 < swiggity_swooty> 20:23 honkctl> Context "goose-garden-kind-fronkchie" modified.
21:24 < cprivite> !honkctl get ingresses
21:24 < honkctl> No resources found in garden namespace.
21:24 < swiggity_swooty> !honkctl config set-context --current --namespace=garden
21:24 < honkctl> Context "goose-garden-kind-swiggity_swooty" modified.
21:24 < nyarison> !honkctl exec groundskeeper -c groundskeeper-59dc8b5fdf-tx8mm --ls
21:24 < honkctl> Disabled for reasons. Honk.
21:24 < cprivite> !honkctl get confgimaps
21:24 < yebyen> !honkctl get services
21:24 < honkctl> No resources found in garden namespace.
21:24 < honkctl> error: the server doesn't have a resource type "confgimaps"
21:24 < cprivite> !honkctl get configmaps
21:24 < honkctl> NAME DATA AGE
21:24 < honkctl> rake 1 26m
21:24 < cprivite> !honkctl get configmap rake
21:24 < honkctl> NAME DATA AGE
21:24 < honkctl> rake 1 27m
21:24 < swiggity_swooty> !honkctl get configmap rake -oyaml
21:24 < honkctl> apiVersion: v1
21:24 < honkctl> data:
21:24 < honkctl> index.html: "<html>\n<head>\n\t<meta charset=\"UTF-8\">\n</head>\n<body>\n<pre>\n\n
21:24 < honkctl> \ ▒▒██\n░░▒▒▒▒▓▓\n ▓▓▒▒▒▒▓▓\n ▓▓▓▓▒▒▒▒\n ▒▒▓▓▒▒██\n ▒▒▓▓▒▒▓▓
21:24 < honkctl> ...
21:24 < cprivite> !honkctl get configmap rake -o yaml
21:24 < honkctl> apiVersion: v1
21:24 < honkctl> data:
21:24 < honkctl> index.html: "<html>\n<head>\n\t<meta charset=\"UTF-8\">\n</head>\n<body>\n<pre>\n\n
21:24 < honkctl> \ ▒▒██\n░░▒▒▒▒▓▓\n ▓▓▒▒▒▒▓▓\n ▓▓▓▓▒▒▒▒\n ▒▒▓▓▒▒██\n ▒▒▓▓▒▒▓▓
21:24 < honkctl> ...
21:24 < fronkchie> !honkctl config set-context --current --namespace=pub
21:24 < nyarison> lol
21:24 < honkctl> Context "goose-garden-kind-fronkchie" modified.
21:25 < cprivite> !honkctl get configmap rake -o wide
21:25 < honkctl> NAME DATA AGE
21:25 < honkctl> rake 1 27m
21:25 < cprivite> !honkctl delete configmap rake
21:25 < honkctl> Error from server (Forbidden): configmaps "rake" is forbidden: User "system:serviceaccount:garden:goose" cannot delete resource "configmaps" in API group "" in the namespace "garden"
21:25 < swiggity_swooty> !honkctl get ns
21:25 < honkctl> NAME STATUS AGE
21:25 < honkctl> default Active 25m
21:25 < honkctl> garden Active 25m
21:25 < honkctl> home Active 25m
21:25 < honkctl> kube-node-lease Active 25m
21:25 < honkctl> kube-public Active 25m
21:25 < honkctl> kube-system Active 25m
21:25 < honkctl> model-village Active 25m
21:25 < honkctl> pub Active 25m
21:25 -!- nyarison [[email protected]] has left #honkctl-jan []
21:25 < swiggity_swooty> !honkctl get pods -n pub
21:25 < honkctl> Error from server (Forbidden): pods is forbidden: User "system:serviceaccount:garden:goose" cannot list resource "pods" in API group "" in the namespace "pub"
21:25 < swiggity_swooty> !honkctl get pods -n kube-public
21:25 < honkctl> Error from server (Forbidden): pods is forbidden: User "system:serviceaccount:garden:goose" cannot list resource "pods" in API group "" in the namespace "kube-public"
21:25 < cprivite> !honkctl get ippools
21:25 < honkctl> error: the server doesn't have a resource type "ippools"
21:26 < fronkchie> kubectl get secrets -n pub
21:26 < cprivite> !honkctl get secrets
21:26 < honkctl> Error from server (Forbidden): secrets is forbidden: User "system:serviceaccount:garden:goose" cannot list resource "secrets" in API group "" in the namespace "garden"
21:26 < swiggity_swooty> !honkctl edit po -l rake=true
21:26 < honkctl> Disabled for reasons. Honk.
21:26 < fronkchie> !honkctl get secrets -n pub
21:26 < honkctl> Error from server (Forbidden): secrets is forbidden: User "system:serviceaccount:garden:goose" cannot list resource "secrets" in API group "" in the namespace "pub"
21:26 < cprivite> !honkctl get rake
21:26 < honkctl> error: the server doesn't have a resource type "rake"
21:26 < swiggity_swooty> !honkctl get all
21:26 < honkctl> NAME READY STATUS RESTARTS AGE
21:26 < honkctl> pod/groundskeeper-59dc8b5fdf-nlcbs 1/1 Running 0 26m
21:26 < honkctl> NAME READY UP-TO-DATE AVAILABLE AGE
21:26 < honkctl> deployment.apps/groundskeeper 1/1 1 1
21:26 < honkctl> ...
21:26 < cprivite> !honkctl create configmap lake
21:26 < honkctl> Error from server (Forbidden): configmaps is forbidden: User "system:serviceaccount:garden:goose" cannot create resource "configmaps" in API group "" in the namespace "garden"
21:26 < swiggity_swooty> !honkctl get ds
21:26 < honkctl> No resources found in garden namespace.
21:27 < fronkchie> !honkctl auth can-i --list
21:27 < honkctl> Resources Non-Resource URLs Resource Names Verbs
21:27 < honkctl> selfsubjectaccessreviews.authorization.k8s.io [] [] [create]
21:27 < honkctl> selfsubjectrulesreviews.authorization.k8s.io [] []
21:27 < honkctl> ...
21:27 < cprivite> !honkctl auth can-i --list
21:27 < honkctl> Resources Non-Resource URLs Resource Names Verbs
21:27 < honkctl> selfsubjectaccessreviews.authorization.k8s.io [] [] [create]
21:27 < honkctl> selfsubjectrulesreviews.authorization.k8s.io [] []
21:27 < honkctl> ...
21:27 < swiggity_swooty> !honkctl get sts
21:27 < honkctl> No resources found in garden namespace.
21:27 < swiggity_swooty> !honkctl get ing
21:27 < honkctl> No resources found in garden namespace.
21:27 < cprivite> !honkctl create selfsubjectaccessreviews lake
21:27 < honkctl> Error: must specify one of -f and -k
21:27 < honkctl> error: unknown command "selfsubjectaccessreviews lake"
21:27 < honkctl> See 'kubectl create -h' for help and examples
21:27 < swiggity_swooty> !honkctl get svc
21:27 < honkctl> No resources found in garden namespace.
21:27 -!- bdimcheff[m] [bdimcheffm@gateway/shell/matrix.org/x-wupllbvnplximxzj] has left #honkctl-jan ["User left"]
21:27 < cprivite> !honkctl create secret lake
21:27 < honkctl> error: unknown command "lake"
21:27 < honkctl> See 'kubectl create secret -h' for help and examples
21:27 < cprivite> !honkctl create configmap
21:27 < honkctl> error: exactly one NAME is required, got 0
21:27 < honkctl> See 'kubectl create configmap -h' for help and examples
21:27 < cprivite> !honkctl create configmap lake
21:27 < honkctl> Error from server (Forbidden): configmaps is forbidden: User "system:serviceaccount:garden:goose" cannot create resource "configmaps" in API group "" in the namespace "garden"
21:28 < swiggity_swooty> kubectl auth can-i create pods
21:28 < swiggity_swooty> !honkctl auth can-i create pods
21:28 < honkctl> no
21:28 < cprivite> !honkctl create namespace lake
21:28 < honkctl> Error from server (Forbidden): namespaces is forbidden: User "system:serviceaccount:garden:goose" cannot create resource "namespaces" in API group "" at the cluster scope
21:28 < swiggity_swooty> !honkctl version
21:28 < honkctl> Client Version: version.Info{Major:"1", Minor:"17", GitVersion:"v1.17.0", GitCommit:"70132b0f130acc0bed193d9ba59dd186f0e634cf", GitTreeState:"clean", BuildDate:"2019-12-07T21:20:10Z", GoVersion:"go1.13.4", Compiler:"gc", Platform:"linux/amd64"}
21:28 < honkctl> Server Version: version.Info{M
21:28 < honkctl> ...
21:28 < cprivite> !honkctl auth can-i create secrets
21:28 < honkctl> no
21:28 < cprivite> !honkctl auth can-i create resources
21:28 < cprivite> !honkctl auth can-i create resource
21:28 < honkctl> Warning: the server doesn't have a resource type 'resources'
21:29 < honkctl> Warning: the server doesn't have a resource type 'resource'
21:29 < cprivite> !honkctl auth can-i create pod
21:29 < honkctl> no
21:29 < cprivite> !honkctl auth can-i create pods
21:29 < honkctl> no
21:29 < cprivite> !honkctl auth can-i create namespaces
21:29 < honkctl> Warning: resource 'namespaces' is not namespace scoped
21:29 < cprivite> !honkctl auth can-i create namespace
21:29 < honkctl> Warning: resource 'namespaces' is not namespace scoped
21:29 < cprivite> kubectl config get-contexts
21:29 < cprivite> !honkctl config get-contexts
21:29 < honkctl> CURRENT NAME CLUSTER AUTHINFO NAMESPACE
21:29 < honkctl> * goose-garden-kind-cprivite kind-cprivite goose-garden-kind-cprivite garden
21:29 < yebyen> !honkctl auth can-i create tasks
21:29 < honkctl> Warning: the server doesn't have a resource type 'tasks'
21:29 < cprivite> !honkctl config view
21:29 < honkctl> apiVersion: v1
21:29 < honkctl> clusters:
21:29 < honkctl> - cluster:
21:29 < honkctl> certificate-authority-data: DATA+OMITTED
21:29 < honkctl> server: https://127.0.0.1:38711
21:29 < honkctl> name: kind-cprivite
21:29 < honkctl> contexts:
21:29 < honkctl> - context:
21:29 < honkctl> cluster: kind-cprivite
21:30 < honkctl> namespace: garden
21:30 < honkctl> user: goose-garden-kind-cprivite
21:30 < honkctl> name: goose-garden-kind-cpr
21:30 < randohacker> !honkctl cluster-info dump
21:30 < honkctl> Error from server (Forbidden): nodes is forbidden: User "system:serviceaccount:garden:goose" cannot list resource "nodes" in API group "" at the cluster scope
21:30 < cprivite> !honkctl get deployment
21:30 < honkctl> NAME READY UP-TO-DATE AVAILABLE AGE
21:30 < honkctl> groundskeeper 1/1 1 1 33m
21:30 < cprivite> !honkctl describe groundskeeper
21:30 < honkctl> error: the server doesn't have a resource type "groundskeeper"
21:31 < cprivite> !honkctl describe deployment groundskeeper
21:31 < honkctl> Name: groundskeeper
21:31 < honkctl> Namespace: garden
21:31 < honkctl> CreationTimestamp: Sat, 18 Jan 2020 01:57:34 +0000
21:31 < honkctl> Labels: rake=true
21:31 < honkctl> Annotations: deployment.kubernetes.io/revision: 1
21:31 < honkctl> kubectl.kubernetes.io/last-appl
21:31 < honkctl> ...
21:31 < cprivite> !honkctl describe deployment groundskeeper -o xml
21:31 < honkctl> Error: unknown shorthand flag: 'o' in -o
21:31 < honkctl> See 'kubectl describe --help' for usage.
21:31 < randohacker> !honkctl auth can-i create pods -n pub
21:31 < honkctl> no
21:31 < cprivite> !honkctl delete deployment groundskeeper
21:31 < honkctl> Error from server (Forbidden): deployments.apps "groundskeeper" is forbidden: User "system:serviceaccount:garden:goose" cannot delete resource "deployments" in API group "apps" in the namespace "garden"
21:31 < randohacker> !honkctl auth can-i create pods model-village
21:31 < honkctl> error: you must specify two or three arguments: verb, resource, and optional resourceName
21:32 < cprivite> !honkctl get configmap rake -o yaml
21:32 < honkctl> apiVersion: v1
21:32 < honkctl> data:
21:32 < honkctl> index.html: "<html>\n<head>\n\t<meta charset=\"UTF-8\">\n</head>\n<body>\n<pre>\n\n
21:32 < honkctl> \ ▒▒██\n░░▒▒▒▒▓▓\n ▓▓▒▒▒▒▓▓\n ▓▓▓▓▒▒▒▒\n ▒▒▓▓▒▒██\n ▒▒▓▓▒▒▓▓
21:32 < honkctl> ...
21:32 < fronkchie> !honkctl describe deployment groundskeeper -n garden
21:32 < honkctl> Name: groundskeeper
21:32 < honkctl> Namespace: garden
21:32 < honkctl> CreationTimestamp: Sat, 18 Jan 2020 02:00:31 +0000
21:32 < honkctl> Labels: rake=true
21:32 < honkctl> Annotations: deployment.kubernetes.io/revision: 1
21:32 < honkctl> kubectl.kubernetes.io/last-appl
21:32 < honkctl> ...
21:32 < fronkchie> !honkctl describe deployment groundskeeper -n garden |grep secret
21:32 < honkctl> Error from server (NotFound): deployments.apps "|grep" not found
21:32 < honkctl> Error from server (NotFound): deployments.apps "secret" not found
21:32 < swiggity_swooty> !honkctl get pods
21:32 < honkctl> NAME READY STATUS RESTARTS AGE
21:32 < honkctl> groundskeeper-59dc8b5fdf-nlcbs 1/1 Running 0 32m
21:32 < swiggity_swooty> !honkctl exec groundskeeper-59dc8b5fdf-nlcbs pwd
21:32 < honkctl> Disabled for reasons. Honk.
21:32 < swiggity_swooty> !honkctl get limitranges
21:32 < honkctl> No resources found in garden namespace.
21:32 < cprivite> !honkctl describe configmap rake -o yaml
21:32 < honkctl> Error: unknown shorthand flag: 'o' in -o
21:32 < honkctl> See 'kubectl describe --help' for usage.
21:33 < cprivite> !honkctl describe configmap rake
21:33 < honkctl> Name: rake
21:33 < honkctl> Namespace: garden
21:33 < honkctl> Labels: <none>
21:33 < honkctl> Annotations: kubectl.kubernetes.io/last-applied-configuration:
21:33 < honkctl> {"apiVersion":"v1","data":{"index.html":"\u003chtml\u003e\n\u003chead\u003e\n\t\u003cmeta charset=\"UTF-8\"\u003e\n\u003c/head\u003e\n
21:33 < honkctl> ...
21:33 -!- brrrr [[email protected]] has quit [Quit: brrrr]
21:34 < fronkchie> !honkctl get pods --show-labels
21:34 < honkctl> Error from server (Forbidden): pods is forbidden: User "system:serviceaccount:garden:goose" cannot list resource "pods" in API group "" in the namespace "pub"
21:34 < fronkchie> !honkctl get pods --show-labels -n garden
21:34 < honkctl> NAME READY STATUS RESTARTS AGE LABELS
21:34 < honkctl> groundskeeper-59dc8b5fdf-6s9s4 1/1 Running 0 33m pod-template-hash=59dc8b5fdf,rake=true
21:34 < cprivite> !honkctl describe configmap rake --show-annotations
21:34 < honkctl> Error: unknown flag: --show-annotations
21:34 < honkctl> See 'kubectl describe --help' for usage.
21:35 < swiggity_swooty> !honkctl auth can-i scale
21:35 < honkctl> error: you must specify two or three arguments: verb, resource, and optional resourceName
21:35 < swiggity_swooty> !honkctl auth can-i scale deploy
21:35 < honkctl> no
21:36 < swiggity_swooty> !honkctl get deploy -oyaml
21:36 < honkctl> apiVersion: v1
21:36 < honkctl> items:
21:36 < honkctl> - apiVersion: apps/v1
21:36 < honkctl> kind: Deployment
21:36 < honkctl> metadata:
21:36 < honkctl> annotations:
21:36 < honkctl> deployment.kubernetes.io/revision: "1"
21:36 < honkctl> kubectl.kubernetes.io/last-applied-configuration: |
21:36 < honkctl> {"apiVersion":"apps/v1","kind":"Deployment","metadata":{"annotations":{}
21:36 < honkctl> ...
21:36 < randohacker> !honkctl auth can-i update labels
21:36 < honkctl> Warning: the server doesn't have a resource type 'labels'
21:36 < swiggity_swooty> !honkctl get deploy --show-labels
21:36 < honkctl> NAME READY UP-TO-DATE AVAILABLE AGE LABELS
21:36 < honkctl> groundskeeper 1/1 1 1 36m rake=true
21:36 < cprivite> !honkctl describe configmap rake --show-kind=false
21:36 < honkctl> Error: unknown flag: --show-kind
21:36 < honkctl> See 'kubectl describe --help' for usage.
21:36 < swiggity_swooty> !honkctl auth can-i label deploy
21:36 < honkctl> no
21:36 < fronkchie> !honkctl get configmaps rake -o yaml
21:36 < honkctl> Error from server (Forbidden): configmaps "rake" is forbidden: User "system:serviceaccount:garden:goose" cannot get resource "configmaps" in API group "" in the namespace "pub"
21:36 < fronkchie> !honkctl get configmaps rake -o yaml -n garden
21:36 < honkctl> apiVersion: v1
21:36 < honkctl> data:
21:36 < honkctl> index.html: "<html>\n<head>\n\t<meta charset=\"UTF-8\">\n</head>\n<body>\n<pre>\n\n
21:36 < honkctl> \ ▒▒██\n░░▒▒▒▒▓▓\n ▓▓▒▒▒▒▓▓\n ▓▓▓▓▒▒▒▒\n ▒▒▓▓▒▒██\n ▒▒▓▓▒▒▓▓
21:36 < honkctl> ...
21:37 < fronkchie> !honkctl get configmaps rake -n garden
21:37 < honkctl> NAME DATA AGE
21:37 < honkctl> rake 1 36m
21:37 < swiggity_swooty> !honkctl get sa
21:37 < honkctl> NAME SECRETS AGE
21:37 < honkctl> default 1 37m
21:37 < honkctl> goose 1 37m
21:37 < honkctl> groundskeeper 1 37m
21:37 < cprivite> !honkctl get configmap rake --show-kind=false
21:37 < honkctl> NAME DATA AGE
21:37 < honkctl> rake 1 39m
21:37 < cprivite> !honkctl get configmap rake
21:37 < honkctl> NAME DATA AGE
21:37 < honkctl> rake 1 40m
21:38 < cprivite> !honkctl get configmap rake -o yaml --custom-columns=data
21:38 < honkctl> Error: unknown flag: --custom-columns
21:38 < honkctl> See 'kubectl get --help' for usage.
21:38 < fronkchie> !honkctl config set-context --current --namespace=garden
21:38 < honkctl> Context "goose-garden-kind-fronkchie" modified.
21:38 < cprivite> !honkctl get configmap rake -o custom-columns=data
21:38 < honkctl> error: unexpected custom-columns spec: data, expected <header>:<json-path-expr>
21:38 < cprivite> !honkctl get configmap rake -o custom-columns=data:data
21:38 < honkctl> data
21:38 < honkctl> map[index.html:<html>
21:38 < honkctl> <head>
21:38 < honkctl> <meta charset="UTF-8">
21:38 < honkctl> </head>
21:38 < honkctl> <body>
21:38 < honkctl> <pre>
21:38 < honkctl> ▒▒██
21:38 < honkctl> ░░▒▒▒▒▓▓
21:38 < honkctl> ▓▓▒▒▒▒▓▓
21:38 < honkctl> ▓▓▓▓▒▒▒▒
21:38 < honkctl> ▒▒▓▓▒▒██
21:38 < honkctl> ▒▒▓▓▒▒▓▓
21:38 < honkctl> â–’â–’â–’â–’â–’â–’â–
21:38 < honkctl> ...
21:38 < fronkchie> why do I feel like this is going to be an ascii goose
21:39 < swiggity_swooty> trust your instincts
21:39 <@mrbobbytables> lol
21:39 < cprivite> !honkctl get nodeport
21:39 < honkctl> error: the server doesn't have a resource type "nodeport"
21:39 < cprivite> !honkctl get services
21:39 < honkctl> No resources found in garden namespace.
21:40 < cprivite> !honkctl auth can-i create service
21:40 < honkctl> no
21:40 < swiggity_swooty> !honkctl get sa -oyaml
21:40 < honkctl> apiVersion: v1
21:40 < honkctl> items:
21:40 < honkctl> - apiVersion: v1
21:40 < honkctl> kind: ServiceAccount
21:40 < honkctl> metadata:
21:40 < honkctl> creationTimestamp: "2020-01-18T01:59:57Z"
21:40 < honkctl> name: default
21:40 < honkctl> namespace: garden
21:40 < honkctl> resourceVersion: "375"
21:40 < honkctl> selfLink: /api/v1/namespaces/garden/serviceaccounts/default
21:40 < honkctl> uid: dbb923e1-3bbe-4
21:40 < honkctl> ...
21:40 < fronkchie> !honkctl create configmap rake --from-literal=rake=0
21:40 < honkctl> Error from server (Forbidden): configmaps is forbidden: User "system:serviceaccount:garden:goose" cannot create resource "configmaps" in API group "" in the namespace "garden"
21:40 < swiggity_swooty> !honkctl get sa gardener -oyaml
21:41 < honkctl> Error from server: etcdserver: request timed out
21:41 < swiggity_swooty> !honkctl get sa
21:41 < honkctl> Error from server: etcdserver: request timed out
21:41 < swiggity_swooty> oh i'm honked up
21:41 < fronkchie> !honkctl create configmap rake --from-literal=rake=0 -n model-village
21:41 < honkctl> Error from server (Forbidden): configmaps is forbidden: User "system:serviceaccount:garden:goose" cannot create resource "configmaps" in API group "" in the namespace "model-village"
21:41 < cprivite> !honkctl get sa
21:41 < swiggity_swooty> !honkctl get sa
21:41 < fronkchie> !honkctl create configmap rake --from-literal=rake=0 -n home
21:41 < honkctl> Error from server (Forbidden): configmaps is forbidden: User "system:serviceaccount:garden:goose" cannot create resource "configmaps" in API group "" in the namespace "home"
21:41 < fronkchie> !honkctl create configmap rake --from-literal=rake=0 -n default
21:41 < honkctl> Error from server (Forbidden): configmaps is forbidden: User "system:serviceaccount:garden:goose" cannot create resource "configmaps" in API group "" in the namespace "default"
21:41 < honkctl> Error from server: etcdserver: request timed out
21:41 < honkctl> Error from server: etcdserver: request timed out
21:41 <@mrbobbytables> damn, we may need to beef this server up a bit
21:41 < swiggity_swooty> !honkci ungoose
21:42 <@jeefy> holy shit
21:42 <@mrbobbytables> the server itself has a loadaverage of 200 right now
21:42 <@mrbobbytables> soo...uhh
21:42 <@mrbobbytables> I may stop this and beef it up a bit more
21:43 < cprivite> ah
21:43 < swiggity_swooty> thanks for running this!
21:43 < cprivite> is it wrong that i feel like getting the rake into the lake is more important than the todo list?
21:43 < TabSab> yes it's great fun
21:43 < swiggity_swooty> i haven't gotten anywhere yet but i'm having fun
21:43 <@mrbobbytables> no no, stop the server and upping the resources will take like 5min
21:43 <@mrbobbytables> maybe 10
21:43 <@mrbobbytables> and nice :)
21:43 <@mrbobbytables> its back down to 150 load average lol
21:43 <@jeefy> rake in the lake rake in the lake rake in the lake
21:44 <@mrbobbytables> okay, put on pause for 5min
21:44 <@mrbobbytables> going to beef it up
21:44 -!- fronkchie [[email protected]] has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
21:45 <@mrbobbytables> well, I will once the terminal starts responding again...
21:45 < swiggity_swooty> !honkci auth can-i impersonate
21:45 < swiggity_swooty> so this is all on one server with kind or something>
21:45 <@mrbobbytables> yeah
21:46 < swiggity_swooty> clever stuff
21:46 <@mrbobbytables> before everyone shared a single instance
21:46 <@mrbobbytables> this time each user has their own
21:46 <@mrbobbytables> we bumped resources, but it wasn't enough
21:48 -!- honkctl [[email protected]] has quit [Remote host closed the connection]
21:48 <@mrbobbytables> there it finally goes
21:49 <@jeefy> That was nuts.
21:50 <@mrbobbytables> holy shit it's still trying to shut it down
21:50 <@mrbobbytables> like its suppose to be on a 90sec timer before it just kills it
21:51 < swiggity_swooty> HONK
21:51 <@jeefy> I just heard "I'm bumping it up to 320gigs"
21:51 <@mrbobbytables> we've now 32 cores
21:51 <@mrbobbytables> now bumped*
21:52 < swiggity_swooty> divert more power to the api-server array
21:52 <@jeefy> Any googlers on here that can bump our quota limit?
21:52 <@jeefy> XDDDDD
21:53 < cprivite> She cannae take more power captain, she's gonna dump!
21:53 <@jeefy> Oh there was definite dumping.
21:53 <@jeefy> Dumping occurred.
21:56 <@mrbobbytables> fighting with quotas
21:56 <@mrbobbytables> yeah
21:56 < cprivite> Time to digitalocean this business
21:58 <@mrbobbytables> okay, we got our quota increase
21:58 <@mrbobbytables> 24 cores / 90gb ram
21:58 < swiggity_swooty> we're gonna need a bigger goose
21:59 <@jeefy> We have plans it's just we don't have time in the near future to go ham on it all
22:00 < cprivite> that's less than 32 gigs and 320gibs of ram
22:00 < cprivite> 32 *cores
22:00 <@jeefy> work with what we've got.
22:00 <@jeefy> break the rest.
22:02 < swiggity_swooty> /ALIAS k !honkctl
22:02 < swiggity_swooty> oops been a while since i've used irc
22:02 < TabSab> yup, all of us
22:03 < cprivite> my "shortcut" is the up arrow
22:03 -!- cprivite is now known as Nubuo
22:03 <@mrbobbytables> things should be starting back up now
22:03 < swiggity_swooty> /ALIAS K !honkctl
22:03 <@jeefy> lol
22:04 < swiggity_swooty> fuck it !honkctl it is
22:04 < swiggity_swooty> !honkctl version
22:05 <@mrbobbytables> give it a sec to join again
22:06 < TabSab> !honkctl get pods -n garden -o json
22:06 -!- honkctl [[email protected]] has joined #honkctl-jan
22:06 <@jeefy> Y'know I figured "spinning up thirty instances of kind" would be resource intensive
22:06 <@jeefy> but this is lol worthy
22:07 -!- t168286 [[email protected]] has joined #honkctl-jan
22:07 < t168286> k
22:07 < Nubuo> !honkctl get sa
22:07 <@jeefy> Since changing your name it'll spin up a new cluster. :)
22:07 -!- t168286 [[email protected]] has left #honkctl-jan []
22:07 -!- Nubuo is now known as cprivite
22:07 < cprivite> !honkctl get sa
22:07 <@jeefy> Lol
22:07 <@jeefy> Gets better
22:07 <@jeefy> Bob deleted your old one.
22:08 <@jeefy> Since we're resource starved.
22:08 <@jeefy> LOLOL
22:08 -!- cprivite is now known as Nubuo
22:08 < Nubuo> !honkctl get sa'
22:08 < honkctl> Cluster is still starting. Please wait for the response from first command.
22:08 < Nubuo> !honkctl get sa
22:08 < honkctl> Cluster is still starting. Please wait for the response from first command.
22:08 -!- t168286 [[email protected]] has joined #honkctl-jan
22:08 -!- honkctl [[email protected]] has quit [Remote host closed the connection]
22:08 < t168286> K
22:08 -!- t168286 [[email protected]] has left #honkctl-jan []
22:08 <@jeefy> Huh.
22:08 <@jeefy> Wonder who that is.
22:08 < Nubuo> the gardener?
22:09 <@jeefy> Maybe.
22:09 < swiggity_swooty> !honkctl get sa
22:09 <@jeefy> I just realized something.
22:09 <@mrbobbytables> omg
22:10 < swiggity_swooty> the suspense...
22:10 < TabSab> I see you're shivering with...
22:10 <@mrbobbytables> we're gonna have to nuke em all because something was being saved in tmp state was not preserved
22:10 <@jeefy> I'm laughing and it's mildly delirious
22:10 <@jeefy> I knew this was a big jump going to individual clusters but
22:10 < swiggity_swooty> did anyone get any flags? not a huge loss right?
22:10 <@jeefy> No one got any flags.
22:11 <@jeefy> Well, in this case no one's completed the todo list.
22:11 <@jeefy> Also you should be able to honkctl again.
22:11 <@jeefy> But it'll start up fresh clusters.
22:11 <@mrbobbytables> fronkchie was going down the right path
22:11 < swiggity_swooty> !honkctl version
22:11 <@jeefy> Oh
22:11 -!- brrrr [[email protected]] has joined #honkctl-jan
22:11 <@mrbobbytables> try this when things get back up
22:11 <@jeefy> My bad.
22:12 < swiggity_swooty> !honkctl
22:12 <@jeefy> Brrrrrr.
22:12 <@mrbobbytables> okay, try this when things come back up
22:12 <@jeefy> Wait till @honkctl is rejoined.
22:12 -!- honkctl [[email protected]] has joined #honkctl-jan
22:12 <@mrbobbytables> get todo todo-1 --output=go-template={{.spec.hint}}
22:12 < Nubuo> !honkctl version
22:12 -!- brrrr [[email protected]] has quit [Client Quit]
22:12 <@jeefy> https://www.irccloud.com/pastebin/dyerSmMT/
22:12 <@jeefy> wooo
22:12 <@jeefy> it lives.
22:12 < swiggity_swooty> !honkctl auth can-i impersonate
22:12 < TabSab> !honkctl get pods -n garden --show-labels
22:13 < swiggity_swooty> !honkctl
22:13 < honkctl> Cluster is still starting. Please wait for the response from first command.
22:13 < swiggity_swooty> !honkctl config set-context --current --namespace=garden
22:13 < honkctl> Context "kind-swiggity_swooty" modified.
22:13 < swiggity_swooty> !honkctl auth can-i impersonate
22:13 < honkctl> error: you must specify two or three arguments: verb, resource, and optional resourceName
22:13 < swiggity_swooty> !honkctl auth can-i impersonate sa
22:13 < honkctl> yes
22:13 < swiggity_swooty> eureka
22:13 < Nubuo> !honkctl config set-context --current --namespace=garden
22:13 < honkctl> Context "kind-Nubuo" modified.
22:14 <@jeefy> This'll be funny.
22:14 < swiggity_swooty> !honkctl get secrets
22:14 < honkctl> Unable to connect to the server: EOF
22:14 <@jeefy> Okay so some insight.
22:14 < Nubuo> !honkctl get sa
22:14 < honkctl> Unable to connect to the server: EOF
22:15 < swiggity_swooty> !honkctl get pods
22:15 < honkctl> Unable to connect to the server: EOF
22:15 < honkctl> Client Version: version.Info{Major:"1", Minor:"17", GitVersion:"v1.17.0", GitCommit:"70132b0f130acc0bed193d9ba59dd186f0e634cf", GitTreeState:"clean", BuildDate:"2019-12-07T21:20:10Z", GoVersion:"go1.13.4", Compiler:"gc", Platform:"linux/amd64"}
22:15 < honkctl> Server Version: version.Info{M
22:15 < honkctl> ...
22:15 < Nubuo> !honkctl get sa
22:15 < honkctl> NAME SECRETS AGE
22:15 < honkctl> default 1 2m10s
22:15 < honkctl> goose 1 2m23s
22:15 < honkctl> groundskeeper 1 2m22s
22:15 <@jeefy> 1) You run a command
22:15 <@jeefy> 2) It checks to see if your cluster is up. If it is, runs it. If not, spin it up.
22:15 <@jeefy> 3) Cluster spins up.
22:15 <@jeefy> 4) Apply a bunch of shit.
22:15 <@jeefy> 5) restart the cluster.
22:15 < swiggity_swooty> !honkctl get pods
22:15 < honkctl> NAME READY STATUS RESTARTS AGE
22:15 < honkctl> groundskeeper-59dc8b5fdf-5qjrj 0/1 Pending 0 105s
22:15 < honkctl> error: you must specify two or three arguments: verb, resource, and optional resourceName
22:15 <@jeefy> For some reason you can run commands between 3 and 5.
22:15 < TabSab> !honkctl get pods -n garden
22:15 < honkctl> NAME READY STATUS RESTARTS AGE
22:15 < honkctl> groundskeeper-59dc8b5fdf-qwthf 0/1 Pending 0 109s
22:15 <@jeefy> And that's what you just did.
22:15 < honkctl> NAME READY STATUS RESTARTS AGE LABELS
22:15 < honkctl> groundskeeper-59dc8b5fdf-qwthf 0/1 Pending 0 117s pod-template-hash=59dc8b5fdf,rake=true
22:15 < TabSab> !honkctl get pods -n garden
22:15 < honkctl> NAME READY STATUS RESTARTS AGE
22:15 < honkctl> groundskeeper-59dc8b5fdf-qwthf 0/1 Pending 0 2m9s
22:16 < swiggity_swooty> !honkctl exec --as=gardener groundskeeper-59dc8b5fdf-5qjrj ls
22:16 < honkctl> Disabled for reasons. Honk.
22:16 < swiggity_swooty> !honkctl exec --as=gardener groundskeeper-59dc8b5fdf-5qjrj pwd
22:16 < honkctl> Disabled for reasons. Honk.
22:16 < swiggity_swooty> !honkctl delete groundskeeper-59dc8b5fdf-5qjrj --as=gardener
22:16 < honkctl> error: the server doesn't have a resource type "groundskeeper-59dc8b5fdf-5qjrj"
22:16 < swiggity_swooty> !honkctl get pods
22:16 < honkctl> NAME READY STATUS RESTARTS AGE
22:16 < honkctl> groundskeeper-59dc8b5fdf-5qjrj 1/1 Running 0 3m19s
22:17 < swiggity_swooty> !honkctl get secrets --as=gardener
22:17 < honkctl> Error from server (Forbidden): users "gardener" is forbidden: User "system:serviceaccount:garden:goose" cannot impersonate resource "users" in API group "" at the cluster scope
22:17 < swiggity_swooty> !honkctl get secrets --as=serviceaccount:gardener
22:17 < honkctl> Error from server (Forbidden): users "serviceaccount:gardener" is forbidden: User "system:serviceaccount:garden:goose" cannot impersonate resource "users" in API group "" at the cluster scope
22:17 <@mrbobbytables> hint: get todo todo-1 --output=go-template={{.spec.hint}}
22:18 < TabSab> !honkctl get secrets --as=serviceaccount:gardener -n garden
22:18 < honkctl> Error from server (Forbidden): users "serviceaccount:gardener" is forbidden: User "system:serviceaccount:garden:goose" cannot impersonate resource "users" in API group "" at the cluster scope
22:18 < swiggity_swooty> !honkctl get secrets --as=garden:gardener
22:18 < honkctl> Error from server (Forbidden): users "garden:gardener" is forbidden: User "system:serviceaccount:garden:goose" cannot impersonate resource "users" in API group "" at the cluster scope
22:18 < Nubuo> !honkctl get po
22:18 < honkctl> NAME READY STATUS RESTARTS AGE
22:18 < honkctl> groundskeeper-59dc8b5fdf-t7dkk 1/1 Running 0 5m52s
22:19 < Nubuo> !honkctl label pod groundskeeper-59dc8b5fdf-t7dkk rake=false
22:19 < honkctl> error: 'rake' already has a value (true), and --overwrite is false
22:19 < Nubuo> !honkctl label pod groundskeeper-59dc8b5fdf-t7dkk rake=false --overwrite
22:19 < honkctl> Error from server (Forbidden): pods "groundskeeper-59dc8b5fdf-t7dkk" is forbidden: User "system:serviceaccount:garden:goose" cannot patch resource "pods" in API group "" in the namespace "garden"
22:19 < Nubuo> !honkctl label pod groundskeeper-59dc8b5fdf-t7dkk rake=false --overwrite --as=gardener
22:19 < honkctl> Error from server (Forbidden): users "gardener" is forbidden: User "system:serviceaccount:garden:goose" cannot impersonate resource "users" in API group "" at the cluster scope
22:19 < Nubuo> !honkctl label pod groundskeeper-59dc8b5fdf-t7dkk rake=false --overwrite --as=gardener -n garden
22:19 < honkctl> Error from server (Forbidden): users "gardener" is forbidden: User "system:serviceaccount:garden:goose" cannot impersonate resource "users" in API group "" at the cluster scope
22:19 < Nubuo> !honkctl label pod groundskeeper-59dc8b5fdf-t7dkk rake=false --overwrite --as=default -n garden
22:19 < honkctl> Error from server (Forbidden): users "default" is forbidden: User "system:serviceaccount:garden:goose" cannot impersonate resource "users" in API group "" at the cluster scope
22:19 < swiggity_swooty> k get sa gardener -oyaml
22:20 < Nubuo> !honkctl get sa gardener -o yaml
22:20 < honkctl> Error from server (NotFound): serviceaccounts "gardener" not found
22:20 < swiggity_swooty> !honkctl get sa gardener -oyaml
22:20 < honkctl> Error from server (NotFound): serviceaccounts "gardener" not found
22:20 < swiggity_swooty> !honkctl get sa
22:20 < honkctl> NAME SECRETS AGE
22:20 < honkctl> default 1 6m50s
22:20 < honkctl> goose 1 6m56s
22:20 < honkctl> groundskeeper 1 6m55s
22:20 < Nubuo> !honkctl label pod groundskeeper-59dc8b5fdf-t7dkk rake=false --overwrite --as=groundskeeper -n garden
22:20 < honkctl> Error from server (Forbidden): pods "groundskeeper-59dc8b5fdf-t7dkk" is forbidden: User "groundskeeper" cannot get resource "pods" in API group "" in the namespace "garden"
22:20 < swiggity_swooty> !honkctl get sa groundskeeper
22:20 < honkctl> NAME SECRETS AGE
22:20 < honkctl> groundskeeper 1 7m5s
22:20 < swiggity_swooty> !honkctl get sa groundskeeper -oyaml
22:20 < honkctl> apiVersion: v1
22:20 < honkctl> kind: ServiceAccount
22:20 < honkctl> metadata:
22:20 < honkctl> annotations:
22:20 < honkctl> kubectl.kubernetes.io/last-applied-configuration: |
22:20 < honkctl> {"apiVersion":"v1","kind":"ServiceAccount","metadata":{"annotations":{},"labels":{"rake":"true"},"name":"groundskeeper","namespace":"garden"}}
22:20 < honkctl> creatio
22:20 < honkctl> ...
22:21 < Nubuo> !honkctl label sa groundskeeper rake=false --overwrite --as=groundskeeper -n garden
22:21 < honkctl> Error from server (Forbidden): serviceaccounts "groundskeeper" is forbidden: User "groundskeeper" cannot get resource "serviceaccounts" in API group "" in the namespace "garden"
22:21 < swiggity_swooty> !honkctl get sa groundskeeper -o go-template={.spec}
22:21 < honkctl> {.spec}
22:21 < Nubuo> !honkctl get configmap
22:21 < honkctl> NAME DATA AGE
22:21 < honkctl> rake 1 8m36s
22:21 < Nubuo> !honkctl get configmap rake
22:21 < honkctl> NAME DATA AGE
22:21 < honkctl> rake 1 8m38s
22:21 < Nubuo> !honkctl get configmap rake -o yaml
22:21 < honkctl> apiVersion: v1
22:21 < honkctl> data:
22:21 < honkctl> index.html: "<html>\n<head>\n\t<meta charset=\"UTF-8\">\n</head>\n<body>\n<pre>\n\n
22:21 < honkctl> \ ▒▒██\n░░▒▒▒▒▓▓\n ▓▓▒▒▒▒▓▓\n ▓▓▓▓▒▒▒▒\n ▒▒▓▓▒▒██\n ▒▒▓▓▒▒▓▓
22:21 < honkctl> ...
22:21 < Nubuo> !honkctl get configmap rake -o custom-columns=data:data
22:21 < honkctl> data
22:21 < honkctl> map[index.html:<html>
22:21 < honkctl> <head>
22:21 < honkctl> <meta charset="UTF-8">
22:21 < honkctl> </head>
22:21 < honkctl> <body>
22:21 < honkctl> <pre>
22:21 < honkctl> ▒▒██
22:21 < honkctl> ░░▒▒▒▒▓▓
22:21 < honkctl> ▓▓▒▒▒▒▓▓
22:21 < honkctl> ▓▓▓▓▒▒▒▒
22:21 < honkctl> ▒▒▓▓▒▒██
22:21 < honkctl> ▒▒▓▓▒▒▓▓
22:21 < honkctl> â–’â–’â–’â–’â–’â–’â–
22:22 < Nubuo> !honkctl get secrets
22:22 < honkctl> Error from server (Forbidden): secrets is forbidden: User "system:serviceaccount:garden:goose" cannot list resource "secrets" in API group "" in the namespace "garden"
22:22 < Nubuo> !honkctl get secrets --as=groundskeeper
22:22 < honkctl> Error from server (Forbidden): secrets is forbidden: User "groundskeeper" cannot list resource "secrets" in API group "" in the namespace "garden"
22:22 < swiggity_swooty> !honkctl get sa groundskeeper -o go-template={{secrets}}
22:22 < honkctl> error: error parsing template {{secrets}}, template: output:1: function "secrets" not defined
22:22 < Nubuo> !honkctl get secrets --as=groundskeeper -A
22:22 < honkctl> Error from server (Forbidden): secrets is forbidden: User "groundskeeper" cannot list resource "secrets" in API group "" at the cluster scope
22:23 < Nubuo> !honkctl get secrets --as=groundskeeper -n garden
22:23 < honkctl> Error from server (Forbidden): secrets is forbidden: User "groundskeeper" cannot list resource "secrets" in API group "" in the namespace "garden"
22:23 < swiggity_swooty> !honkctl get sa groundskeeper -o go-template={{.secrets}}
22:23 < honkctl> [map[name:groundskeeper-token-7cb5p]]
22:23 < swiggity_swooty> !honkctl get sa groundskeeper -o go-template={{.secrets.groundskeeper-token-7cb5p}}
22:23 < honkctl> error: error parsing template {{.secrets.groundskeeper-token-7cb5p}}, template: output:1: bad character U+002D '-'
22:23 < swiggity_swooty> !honkctl get sa groundskeeper -o go-template={{.secrets['groundskeeper-token-7cb5p']}}
22:23 < honkctl> error: error parsing template {{.secrets['groundskeeper-token-7cb5p']}}, template: output:1: unexpected bad character U+005B '[' in command
22:23 < Nubuo> !honkctl get sa groundskeeper -o custom-columns=secrets:secrets
22:23 < honkctl> secrets
22:23 < honkctl> [map[name:groundskeeper-token-qj5zv]]
22:24 < Nubuo> !honkctl get sa groundskeeper -o custom-columns=secrets:secrets --as=groundskeeper
22:24 < honkctl> Error from server (Forbidden): serviceaccounts "groundskeeper" is forbidden: User "groundskeeper" cannot get resource "serviceaccounts" in API group "" in the namespace "garden"
22:24 < Nubuo> !honkctl get sa groundskeeper -o yaml
22:24 < honkctl> apiVersion: v1
22:24 < honkctl> kind: ServiceAccount
22:24 < honkctl> metadata:
22:24 < honkctl> annotations:
22:24 < honkctl> kubectl.kubernetes.io/last-applied-configuration: |
22:24 < honkctl> {"apiVersion":"v1","kind":"ServiceAccount","metadata":{"annotations":{},"labels":{"rake":"true"},"name":"groundskeeper","namespace":"garden"}}
22:24 < honkctl> creatio
22:24 < honkctl> ...
22:24 < Nubuo> !honkctl get sa groundskeeper -o custom-columns=configmap
22:24 < honkctl> error: unexpected custom-columns spec: configmap, expected <header>:<json-path-expr>
22:24 < Nubuo> !honkctl get sa groundskeeper -o custom-columns=configmap:configmap
22:24 < honkctl> configmap
22:24 < honkctl> <none>
22:24 < swiggity_swooty> !honkctl get secret groundskeeper-token-7cb5p -oyaml --as=groundskeeper
22:24 < honkctl> Error from server (Forbidden): secrets "groundskeeper-token-7cb5p" is forbidden: User "groundskeeper" cannot get resource "secrets" in API group "" in the namespace "garden"
22:24 < swiggity_swooty> !honkctl get secret groundskeeper-token-7cb5p -oyaml --as=serviceaccount:groundskeeper
22:24 < honkctl> Error from server (Forbidden): users "serviceaccount:groundskeeper" is forbidden: User "system:serviceaccount:garden:goose" cannot impersonate resource "users" in API group "" at the cluster scope
22:25 < swiggity_swooty> !honkctl auth can-i create pods --as=groundskeeper
22:25 < honkctl> no
22:25 < Nubuo> !honkctl get sa groundskeeper -o custom-columns=data:data
22:25 < honkctl> data
22:25 < honkctl> <none>
22:25 < Nubuo> !honkctl get secrets -o custom-columns=secrets:secrets --as=groundskeeper
22:25 < honkctl> Error from server (Forbidden): secrets is forbidden: User "groundskeeper" cannot list resource "secrets" in API group "" in the namespace "garden"
22:26 < Nubuo> !honkctl get namespacedSecret
22:26 < honkctl> error: the server doesn't have a resource type "namespacedSecret"
22:26 < swiggity_swooty> !honkctl get secret groundskeeper-token-7cb5p -oyaml --as=system:serviceaccount:garden:groundskeeper
22:26 < honkctl> Error from server (Forbidden): secrets "groundskeeper-token-7cb5p" is forbidden: User "system:serviceaccount:garden:groundskeeper" cannot get resource "secrets" in API group "" in the namespace "garden"
22:26 < swiggity_swooty> !honkctl get todos
22:26 < honkctl> NAME TODO
22:26 < honkctl> todo-1 Steal the groundskeepers keys.
22:26 < honkctl> todo-2 Get to the Pub.
22:26 < honkctl> todo-3 Get into the model-village.
22:26 < honkctl> todo-4 Steal the beautiful minature golden bell.
22:26 < honkctl> todo-5 ...and take it all the way back home.
22:27 < swiggity_swooty> !honkctl get todos -oyaml
22:27 < honkctl> apiVersion: v1
22:27 < honkctl> items:
22:27 < honkctl> - apiVersion: honk.ci/v1
22:27 < honkctl> kind: Todo
22:27 < honkctl> metadata:
22:27 < honkctl> annotations:
22:27 < honkctl> kubectl.kubernetes.io/last-applied-configuration: |
22:27 < Nubuo> !honkctl get secrets
22:27 < honkctl> {"apiVersion":"honk.ci/v1","kind":"Todo","metadata":{"annotations":{},"name":"todo-1"},"spec":{"hint":"Sometimes one mus
22:27 < honkctl> ...
22:27 < honkctl> Error from server (Forbidden): secrets is forbidden: User "system:serviceaccount:garden:goose" cannot list resource "secrets" in API group "" in the namespace "garden"
22:27 < Nubuo> !honkctl get secrets -n default
22:27 < honkctl> Error from server (Forbidden): secrets is forbidden: User "system:serviceaccount:garden:goose" cannot list resource "secrets" in API group "" in the namespace "default"
22:27 < Nubuo> !honkctl get ConfigMap
22:27 < honkctl> NAME DATA AGE
22:27 < honkctl> rake 1 14m
22:27 < swiggity_swooty> !honkctl get todos -o go-template={{.spec}}
22:27 < honkctl> <no value>
22:27 < Nubuo> !honkctl get ConfigMap --as=groundskeeper
22:27 < honkctl> Error from server (Forbidden): configmaps is forbidden: User "groundskeeper" cannot list resource "configmaps" in API group "" in the namespace "garden"
22:27 < Nubuo> !honkctl get ConfigMap --as=default
22:27 < honkctl> Error from server (Forbidden): users "default" is forbidden: User "system:serviceaccount:garden:goose" cannot impersonate resource "users" in API group "" at the cluster scope
22:27 < Nubuo> !honkctl get ConfigMap --as=goose
22:27 < honkctl> Error from server (Forbidden): users "goose" is forbidden: User "system:serviceaccount:garden:goose" cannot impersonate resource "users" in API group "" at the cluster scope
22:27 < Nubuo> !honkctl get ConfigMap --as=groundskeeper
22:27 < honkctl> Error from server (Forbidden): configmaps is forbidden: User "groundskeeper" cannot list resource "configmaps" in API group "" in the namespace "garden"
22:29 < swiggity_swooty> !honkctl get pod -l rake=true -o go-template={{.spec.serviceAccountName}}
22:29 < honkctl> <no value>
22:29 < Nubuo> !honkctl auth can-i --list --as=groundskeeper
22:29 < honkctl> Resources Non-Resource URLs Resource Names Verbs
22:29 < honkctl> selfsubjectaccessreviews.authorization.k8s.io [] [] [create]
22:29 < honkctl> selfsubjectrulesreviews.authorization.k8s.io [] [] [c
22:29 < honkctl> ...
22:29 < swiggity_swooty> !honkctl get pod -l rake=true -o go-template={{.spec.serviceAccount}}
22:29 < honkctl> <no value>
22:29 < swiggity_swooty> !honkctl get pod -l rake=true -o go-template={{.spec}}
22:29 < honkctl> <no value>
22:29 < Nubuo> !honkctl auth can-i create pod --as=groundskeeper
22:29 < honkctl> no
22:29 < Nubuo> !honkctl auth can-i create deployment --as=groundskeeper
22:29 < honkctl> no
22:29 < swiggity_swooty> !honkctl get pods
22:29 < honkctl> NAME READY STATUS RESTARTS AGE
22:29 < honkctl> groundskeeper-59dc8b5fdf-5qjrj 1/1 Running 0 15m
22:29 < Nubuo> !honkctl auth can-i get secret --as=groundskeeper
22:29 < honkctl> no
22:29 < Nubuo> !honkctl auth can-i delete --as=groundskeeper
22:29 < honkctl> error: you must specify two or three arguments: verb, resource, and optional resourceName
22:29 < Nubuo> !honkctl auth can-i delete secret --as=groundskeeper
22:29 < honkctl> no
22:29 < swiggity_swooty> !honkctl get pod groundskeeper-59dc8b5fdf-5qjrj -oyaml
22:29 < honkctl> apiVersion: v1
22:29 < honkctl> kind: Pod
22:29 < honkctl> metadata:
22:29 < honkctl> creationTimestamp: "2020-01-18T03:13:36Z"
22:29 < honkctl> generateName: groundskeeper-59dc8b5fdf-
22:29 < honkctl> labels:
22:29 < honkctl> pod-template-hash: 59dc8b5fdf
22:29 < honkctl> rake: "true"
22:29 < honkctl> name: groundskeeper-59dc8b5fdf-5qjrj
22:29 < honkctl> namespace: garden
22:29 < honkctl> ownerReferences:
22:30 < honkctl> - apiVersion:
22:30 < honkctl> ...
22:30 < swiggity_swooty> !honkctl get pod groundskeeper-59dc8b5fdf-5qjrj -o go-template={{.spec.serviceAccount}}
22:30 < honkctl> groundskeeper
22:30 < Nubuo> !honkctl exec -it groundskeeper-59dc8b5fdf-5qjrj /bin/bash
22:30 < honkctl> Disabled for reasons. Honk.
22:30 < Nubuo> !honkctl exec -it groundskeeper-59dc8b5fdf-5qjrj /bin/bash --as=groundskeeper
22:30 < honkctl> Disabled for reasons. Honk.
22:30 < swiggity_swooty> !honkctl get pod groundskeeper-59dc8b5fdf-5qjrj -o go-template={{.spec.env}}
22:30 < honkctl> <no value>
22:30 < swiggity_swooty> !honkctl get pod groundskeeper-59dc8b5fdf-5qjrj -o go-template={{.spec.volumes}}
22:30 < honkctl> [map[configMap:map[defaultMode:420 name:rake] name:rake] map[name:groundskeeper-token-7cb5p secret:map[defaultMode:420 secretName:groundskeeper-token-7cb5p]]]
22:31 < Nubuo> !honkctl can-i run
22:31 < honkctl> Error: unknown command "can-i" for "kubectl"
22:31 < honkctl> Run 'kubectl --help' for usage.
22:31 < Nubuo> !honkctl auth can-i run
22:31 < honkctl> error: you must specify two or three arguments: verb, resource, and optional resourceName
22:31 < Nubuo> !honkctl auth can-i run pod
22:31 < honkctl> no
22:31 < Nubuo> !honkctl auth can-i run pod --as=groundskeeper
22:31 < honkctl> no
22:32 < Nubuo> !honkctl auth can-i expose pod --as=groundskeeper
22:32 < honkctl> no
22:32 < Nubuo> !honkctl auth can-i expose service --as=groundskeeper
22:32 < honkctl> no
22:32 < swiggity_swooty> !honkctl get secrets
22:32 < honkctl> Error from server (Forbidden): secrets is forbidden: User "system:serviceaccount:garden:goose" cannot list resource "secrets" in API group "" in the namespace "garden"
22:32 < Nubuo> !honkctl edit sa groundskeeper --as=groundskeeper
22:32 < honkctl> Disabled for reasons. Honk.
22:32 < swiggity_swooty> !honkctl get secrets -as=groundskeeper
22:32 < honkctl> Error: unknown shorthand flag: 'a' in -as=groundskeeper
22:32 < honkctl> See 'kubectl get --help' for usage.
22:32 < swiggity_swooty> !honkctl get secrets --as=groundskeeper
22:32 < honkctl> Error from server (Forbidden): secrets is forbidden: User "groundskeeper" cannot list resource "secrets" in API group "" in the namespace "garden"
22:32 < Nubuo> !honkctl delete sa groundskeeper --as=groundskeeper
22:32 < honkctl> Error from server (Forbidden): serviceaccounts "groundskeeper" is forbidden: User "groundskeeper" cannot delete resource "serviceaccounts" in API group "" in the namespace "garden"
22:33 < swiggity_swooty> !honkctl get secrets --as=serviceaccount:groundskeeper
22:33 < honkctl> Error from server (Forbidden): users "serviceaccount:groundskeeper" is forbidden: User "system:serviceaccount:garden:goose" cannot impersonate resource "users" in API group "" at the cluster scope
22:33 < Nubuo> !honkctl get po --as=groundskeeper
22:33 < honkctl> Error from server (Forbidden): pods is forbidden: User "groundskeeper" cannot list resource "pods" in API group "" in the namespace "garden"
22:33 < Nubuo> !honkctl get po --as=groundskeeper -n default
22:33 < honkctl> Error from server (Forbidden): pods is forbidden: User "groundskeeper" cannot list resource "pods" in API group "" in the namespace "default"
22:33 < Nubuo> !honkctl get po --as=groundskeeper -n pub
22:33 < honkctl> Error from server (Forbidden): pods is forbidden: User "groundskeeper" cannot list resource "pods" in API group "" in the namespace "pub"
22:34 < Nubuo> !honkctl get todo
22:34 < honkctl> NAME TODO
22:34 < honkctl> todo-1 Steal the groundskeepers keys.
22:34 < honkctl> todo-2 Get to the Pub.
22:34 < honkctl> todo-3 Get into the model-village.
22:34 < honkctl> todo-4 Steal the beautiful minature golden bell.
22:34 < honkctl> todo-5 ...and take it all the way back home.
22:34 < Nubuo> !honkctl get po -n pub
22:34 < honkctl> Error from server (Forbidden): pods is forbidden: User "system:serviceaccount:garden:goose" cannot list resource "pods" in API group "" in the namespace "pub"
22:34 < Nubuo> !honkctl get po -n pub --as=groundskeeper
22:34 < honkctl> Error from server (Forbidden): pods is forbidden: User "groundskeeper" cannot list resource "pods" in API group "" in the namespace "pub"
22:34 < swiggity_swooty> kubectl auth can-i scale deployment --as=groundskeeper
22:34 < swiggity_swooty> !honkctl auth can-i scale deployment --as=groundskeeper
22:34 < honkctl> no
22:34 < Nubuo> !honkctl get configmap rake
22:34 < honkctl> NAME DATA AGE
22:34 < honkctl> rake 1 21m
22:34 < Nubuo> !honkctl get configmap rake --as=groundskeeper
22:34 < honkctl> Error from server (Forbidden): configmaps "rake" is forbidden: User "groundskeeper" cannot get resource "configmaps" in API group "" in the namespace "garden"
22:35 < Nubuo> !honkctl edit configmap rake --as=groundskeeper
22:35 < honkctl> Disabled for reasons. Honk.
22:35 < Nubuo> !honkctl delete configmap rake
22:35 < honkctl> Error from server (Forbidden): configmaps "rake" is forbidden: User "system:serviceaccount:garden:goose" cannot delete resource "configmaps" in API group "" in the namespace "garden"
22:35 < Nubuo> !honkctl delete configmap rake --as=groundskeeper
22:35 < honkctl> Error from server (Forbidden): configmaps "rake" is forbidden: User "groundskeeper" cannot delete resource "configmaps" in API group "" in the namespace "garden"
22:35 < swiggity_swooty> !honkctl auth can-i --list --as=groundskeeper
22:35 < honkctl> Resources Non-Resource URLs Resource Names Verbs
22:35 < honkctl> selfsubjectaccessreviews.authorization.k8s.io [] [] [create]
22:35 < honkctl> selfsubjectrulesreviews.authorization.k8s.io [] [] [c
22:35 < honkctl> ...
22:35 < Nubuo> !honkctl auth can-i --list --as=groundskeeper -o custom-columns=verbs:verbsd
22:35 < honkctl> Error: unknown shorthand flag: 'o' in -o
22:35 < honkctl> See 'kubectl auth can-i --help' for usage.
22:35 < Nubuo> !honkctl auth can-i --list --as=groundskeeper -o custom-columns=verbs:verbs
22:35 < honkctl> Error: unknown shorthand flag: 'o' in -o
22:35 < honkctl> See 'kubectl auth can-i --help' for usage.
22:36 < Nubuo> !honkctl auth can-i --list --as=groundskeeper --help
22:36 < honkctl> Check whether an action is allowed.
22:36 < honkctl> VERB is a logical Kubernetes API verb like 'get', 'list', 'watch', 'delete', etc. TYPE is a Kubernetes resource. Shortcuts and groups will be resolved. NONRESOURCEURL is a partial URL starts with "/". NAME is the name of a particular Kub
22:36 < honkctl> ...
22:36 < swiggity_swooty> !honkctl label deploy gardener rake=lake --as=groundskeeper
22:36 < honkctl> Error from server (Forbidden): deployments.apps "gardener" is forbidden: User "groundskeeper" cannot get resource "deployments" in API group "apps" in the namespace "garden"
22:37 < Nubuo> !honkctl auth can-i --list --as=groundskeeper --no-headers
22:37 < honkctl> selfsubjectaccessreviews.authorization.k8s.io [] [] [create]
22:37 < honkctl> selfsubjectrulesreviews.authorization.k8s.io [] [] [create]
22:37 < honkctl> customresourcedefinitions.apiextensions.k8s.io [] [] [get list watch]
22:37 < honkctl> todos.honk.c
22:37 < honkctl> ...
22:37 < swiggity_swooty> !honkctl label pod --all rake=lake --as=groundskeeper
22:37 < honkctl> Error from server (Forbidden): pods is forbidden: User "groundskeeper" cannot list resource "pods" in API group "" in the namespace "garden"
22:37 < swiggity_swooty> !honkctl get pods
22:37 < honkctl> NAME READY STATUS RESTARTS AGE
22:37 < honkctl> groundskeeper-59dc8b5fdf-5qjrj 1/1 Running 0 24m
22:37 < Nubuo> !honkctl auth can-i --list --as=groundskeeper --no-headers --subresource=opd
22:37 < honkctl> error: list option can't be specified with neither quiet, all-namespaces nor subresource options
22:37 < Nubuo> !honkctl auth can-i --list --as=groundskeeper --no-headers --subresource=opod
22:37 < honkctl> error: list option can't be specified with neither quiet, all-namespaces nor subresource options
22:37 < Nubuo> !honkctl auth can-i --list --as=groundskeeper --no-headers --subresource=pod
22:37 < honkctl> error: list option can't be specified with neither quiet, all-namespaces nor subresource options
22:38 < swiggity_swooty> !honkctl label pod groundskeeper-59dc8b5fdf-5qjrj rake=lake --as=groundskeeper
22:38 < honkctl> Error from server (Forbidden): pods "groundskeeper-59dc8b5fdf-5qjrj" is forbidden: User "groundskeeper" cannot get resource "pods" in API group "" in the namespace "garden"
22:38 < Nubuo> !honkctl auth can-i --list --as=groundskeeper --subresource=pod
22:38 < honkctl> error: list option can't be specified with neither quiet, all-namespaces nor subresource options
22:38 < Nubuo> !honkctl auth can-i --as=groundskeeper --subresource=pod
22:38 < honkctl> error: you must specify two or three arguments: verb, resource, and optional resourceName
22:38 < Nubuo> !honkctl auth can-i delete --as=groundskeeper --subresource=pod
22:38 < honkctl> error: you must specify two or three arguments: verb, resource, and optional resourceName
22:38 -!- bdimcheff[m] [bdimcheffm@gateway/shell/matrix.org/x-wupllbvnplximxzj] has joined #honkctl-jan
22:39 < Nubuo> !honkctl auth can-i --list --as=groundskeeper --no-headers
22:39 < honkctl> selfsubjectaccessreviews.authorization.k8s.io [] [] [create]
22:39 < honkctl> selfsubjectrulesreviews.authorization.k8s.io [] [] [create]
22:39 < honkctl> customresourcedefinitions.apiextensions.k8s.io [] [] [get list watch]
22:39 < honkctl> todos.honk.c
22:39 < honkctl> ...
22:39 < swiggity_swooty> !honkctl get crd
22:39 < honkctl> NAME CREATED AT
22:39 < honkctl> todos.honk.ci 2020-01-18T03:13:26Z
22:39 < swiggity_swooty> !honkctl describe todos
22:39 < honkctl> Name: todo-1
22:39 < honkctl> Namespace:
22:39 < honkctl> Labels: <none>
22:39 < honkctl> Annotations: kubectl.kubernetes.io/last-applied-configuration:
22:39 < honkctl> {"apiVersion":"honk.ci/v1","kind":"Todo","metadata":{"annotations":{},"name":"todo-1"},"spec":{"hint":"Sometimes one must become that they
22:39 < honkctl> ...
22:40 < Nubuo> !honkctl get all -n pub --as=groundskeeper
22:40 < swiggity_swooty> !honkctl get todos -o go-template={{.spec.hint}}
22:40 < honkctl> Error from server (Forbidden): pods is forbidden: User "groundskeeper" cannot list resource "pods" in API group "" in the namespace "pub"
22:40 < honkctl> Error from server (Forbidden): replicationcontrollers is forbidden: User "groundskeeper" cannot list resource "replicationcontrollers" in
22:40 < honkctl> ...
22:40 < honkctl> <no value>
22:40 < Nubuo> !honkctl get crd -n pub --as=groundskeeper
22:40 < honkctl> NAME CREATED AT
22:40 < honkctl> todos.honk.ci 2020-01-18T03:12:48Z
22:41 < Nubuo> !honkctl get secrets -n pub --as=groundskeeper
22:41 < honkctl> Error from server (Forbidden): secrets is forbidden: User "groundskeeper" cannot list resource "secrets" in API group "" in the namespace "pub"
22:41 < swiggity_swooty> !honkctl get todos -o go-template={{.spec}}
22:41 < honkctl> <no value>
22:41 < Nubuo> !honkctl get configmap -n pub --as=groundskeeper
22:41 < honkctl> Error from server (Forbidden): configmaps is forbidden: User "groundskeeper" cannot list resource "configmaps" in API group "" in the namespace "pub"
22:41 < Nubuo> !honkctl get configmaps -n pub --as=groundskeeper
22:41 < honkctl> Error from server (Forbidden): configmaps is forbidden: User "groundskeeper" cannot list resource "configmaps" in API group "" in the namespace "pub"
22:41 < Nubuo> !honkctl get todo -n pub --as=groundskeeper
22:41 <@mrbobbytables> you're on the right track
22:41 < honkctl> NAME TODO
22:41 < honkctl> todo-1 Steal the groundskeepers keys.
22:41 < honkctl> todo-2 Get to the Pub.
22:41 < honkctl> todo-3 Get into the model-village.
22:41 < honkctl> todo-4 Steal the beautiful minature golden bell.
22:41 < honkctl> todo-5 ...and take it all the way back home.
22:41 < Nubuo> !honkctl get po -n pub --as=groundskeeper
22:41 < honkctl> Error from server (Forbidden): pods is forbidden: User "groundskeeper" cannot list resource "pods" in API group "" in the namespace "pub"
22:42 < swiggity_swooty> !honkctl get todos -o go-template={{.spec.hint}}
22:42 < honkctl> <no value>
22:42 < swiggity_swooty> !honkctl get todos -o go-template={{.spec.0}}
22:42 < honkctl> error: error parsing template {{.spec.0}}, template: output:1: unexpected ".0" in operand
22:42 < Nubuo> !honkctl describe todo -n pub --as=groundskeeper
22:42 < honkctl> Name: todo-1
22:42 < honkctl> Namespace:
22:42 < honkctl> Labels: <none>
22:42 < honkctl> Annotations: kubectl.kubernetes.io/last-applied-configuration:
22:42 < honkctl> {"apiVersion":"honk.ci/v1","kind":"Todo","metadata":{"annotations":{},"name":"todo-1"},"spec":{"hint":"Sometimes one must become that they
22:42 < honkctl> ...
22:42 < Nubuo> !honkctl describe todo -n pub --as=groundskeeper --subresource=todo-2
22:42 < honkctl> Error: unknown flag: --subresource
22:42 < honkctl> See 'kubectl describe --help' for usage.
22:42 < swiggity_swooty> !honkci --as=groundskeeper config view
22:42 < Nubuo> !honkctl describe todo todo-1 -n pub --as=groundskeeper --subresource=todo-2
22:42 < honkctl> Error: unknown flag: --subresource
22:42 < honkctl> See 'kubectl describe --help' for usage.
22:43 < Nubuo> !honkctl describe todo todo-1 -n pub --as=groundskeeper
22:43 < honkctl> Name: todo-1
22:43 < honkctl> Namespace:
22:43 < honkctl> Labels: <none>
22:43 < honkctl> Annotations: kubectl.kubernetes.io/last-applied-configuration:
22:43 < honkctl> {"apiVersion":"honk.ci/v1","kind":"Todo","metadata":{"annotations":{},"name":"todo-1"},"spec":{"hint":"Sometimes one must become that they
22:43 < honkctl> ...
22:43 < Nubuo> !honkctl describe todo todo-1 -n pub --as=groundskeeper --no-headers
22:43 < honkctl> Error: unknown flag: --no-headers
22:43 < honkctl> See 'kubectl describe --help' for usage.
22:43 < Nubuo> !honkctl describe todo todo-1 -n pub --as=groundskeeper --skip-headers
22:43 < honkctl> Name: todo-1
22:43 < honkctl> Namespace:
22:43 < honkctl> Labels: <none>
22:43 < honkctl> Annotations: kubectl.kubernetes.io/last-applied-configuration:
22:43 < honkctl> {"apiVersion":"honk.ci/v1","kind":"Todo","metadata":{"annotations":{},"name":"todo-1"},"spec":{"hint":"Sometimes one must become that they
22:43 < honkctl> ...
22:43 < swiggity_swooty> !honkci config view --as=groundskeeper
22:43 < Nubuo> !honkctl describe todo todo-1 -n pub --as=groundskeeper -o custom-columns=annotations:annotations
22:43 < honkctl> Error: unknown shorthand flag: 'o' in -o
22:43 < honkctl> See 'kubectl describe --help' for usage.
22:44 < Nubuo> !honkctl describe todo todo-2 -n pub --as=groundskeeper
22:44 < honkctl> Name: todo-2
22:44 < honkctl> Namespace:
22:44 < honkctl> Labels: <none>
22:44 < honkctl> Annotations: kubectl.kubernetes.io/last-applied-configuration:
22:44 < honkctl> {"apiVersion":"honk.ci/v1","kind":"Todo","metadata":{"annotations":{},"name":"todo-2"},"spec":{"hint":"Let's go to the Winchester, have a
22:44 < honkctl> ...
22:44 < Nubuo> !honkctl describe todo todo-3 -n pub --as=groundskeeper
22:44 < honkctl> Name: todo-3
22:44 < honkctl> Namespace:
22:44 < honkctl> Labels: <none>
22:44 < honkctl> Annotations: kubectl.kubernetes.io/last-applied-configuration:
22:44 < honkctl> {"apiVersion":"honk.ci/v1","kind":"Todo","metadata":{"annotations":{},"name":"todo-3"},"spec":{"hint":"the grizzly knows the way","todo":"
22:44 < honkctl> ...
22:44 < Nubuo> !honkctl describe todo todo-4 -n pub --as=groundskeeper
22:44 < honkctl> Name: todo-4
22:44 < honkctl> Namespace:
22:44 < honkctl> Labels: <none>
22:44 < honkctl> Annotations: kubectl.kubernetes.io/last-applied-configuration:
22:44 < honkctl> {"apiVersion":"honk.ci/v1","kind":"Todo","metadata":{"annotations":{},"name":"todo-4"},"spec":{"hint":"","todo":"Steal the beautiful minat
22:44 < swiggity_swooty> !honkctl get todo todo-1 -o go-template={{.spec.hint}}
22:44 < honkctl> ...
22:44 < honkctl> Sometimes one must become that they honk to reach ones goals.
22:44 -!- monty [[email protected]] has joined #honkctl-jan
22:45 < swiggity_swooty> !honkctl auth can-i list pods --as=groundskeeper
22:45 < honkctl> no
22:45 < Nubuo> !honkctl get todo todo-1 -n pub --as=groundskeeper -o custom-columns=annotations:annotations
22:45 < honkctl> annotations
22:45 < honkctl> <none>
22:45 < swiggity_swooty> !honkctl auth can-i get secrets --as=groundskeeper
22:45 < honkctl> no
22:45 < swiggity_swooty> !honkctl auth can-i list secrets --as=groundskeeper
22:45 < honkctl> no
22:45 < yebyen> !honkctl get -o wide -n pub todos
22:45 < Nubuo> !honkctl get todo todo-1 -n pub --as=groundskeeper -o custom-columns=spec:spec
22:45 < honkctl> spec
22:45 < honkctl> map[hint:Sometimes one must become that they honk to reach ones goals. todo:Steal the groundskeepers keys.]
22:45 < swiggity_swooty> !honkctl auth can-i delete secrets --as=groundskeeper
22:45 < honkctl> no
22:45 < Nubuo> !honkctl get todo todo-2 -n pub --as=groundskeeper -o custom-columns=spec:spec
22:45 < honkctl> spec
22:45 < honkctl> map[hint:Let's go to the Winchester, have a nice cold pint, and wait for this all to blow over. todo:Get to the Pub.]
22:45 < swiggity_swooty> !honkctl auth can-i patch secrets --as=groundskeeper
22:45 < honkctl> no
22:46 < swiggity_swooty> !honkctl auth can-i use secrets --as=groundskeeper
22:46 < honkctl> no
22:47 < Nubuo> !honkctl get crd -n pub --as=groundskeeper -o custom-columns=spec:spec
22:47 < honkctl> spec
22:47 < honkctl> map[conversion:map[strategy:None] group:honk.ci names:map[kind:Todo listKind:TodoList plural:todos shortNames:[td] singular:todo] scope:Cluster versions:[map[additionalPrinterColumns:[map[description:An important task jsonPath:.spec.todo name:Todo type:string]] name:v1
22:47 < honkctl> ...
22:47 < swiggity_swooty> !honkctl get sa groundskeeper -o go-template {{.spec.automountServiceAccountToken}}
22:47 < honkctl> error: template format specified but no template given
22:47 < swiggity_swooty> !honkctl get sa groundskeeper -o go-template={{.spec.automountServiceAccountToken}}
22:47 < honkctl> <no value>
22:47 < Nubuo> !honkctl get crd -n pub --as=groundskeeper
22:47 < honkctl> NAME CREATED AT
22:47 < honkctl> todos.honk.ci 2020-01-18T03:12:48Z
22:47 < swiggity_swooty> defaults
22:47 < Nubuo> !honkctl get pod -n pub --as=groundskeeper
22:47 < honkctl> Error from server (Forbidden): pods is forbidden: User "groundskeeper" cannot list resource "pods" in API group "" in the namespace "pub"
22:47 < Nubuo> !honkctl get * -n pub --as=groundskeeper
22:47 < honkctl> error: the server doesn't have a resource type "*"
22:47 < Nubuo> !honkctl get all -n pub --as=groundskeeper
22:47 < honkctl> Error from server (Forbidden): pods is forbidden: User "groundskeeper" cannot list resource "pods" in API group "" in the namespace "pub"
22:47 < honkctl> Error from server (Forbidden): replicationcontrollers is forbidden: User "groundskeeper" cannot list resource "replicationcontrollers" in
22:47 < honkctl> ...
22:48 < swiggity_swooty> !honkctl auth can-i create pods --as-groundskeeper
22:48 < honkctl> Error: unknown flag: --as-groundskeeper
22:48 < honkctl> See 'kubectl auth can-i --help' for usage.
22:48 < honkctl> NAME TODO
22:48 < honkctl> todo-1 Steal the groundskeepers keys.
22:48 < honkctl> todo-2 Get to the Pub.
22:48 < honkctl> todo-3 Get into the model-village.
22:48 < honkctl> todo-4 Steal the beautiful minature golden bell.
22:48 < honkctl> todo-5 ...and take it all the way back home.
22:48 < swiggity_swooty> !honkctl auth can-i create pods --as=groundskeeper
22:48 < honkctl> no
22:48 < swiggity_swooty> !honkctl create pod
22:48 < honkctl> Error: must specify one of -f and -k
22:48 < honkctl> error: unknown command "pod"
22:48 < honkctl> See 'kubectl create -h' for help and examples
22:48 < Nubuo> !honkctl get beer -n pub --as=groundskeeper
22:48 < honkctl> error: the server doesn't have a resource type "beer"
22:48 < swiggity_swooty> !honkctl create -h
22:48 < honkctl> Create a resource from a file or from stdin.
22:48 < honkctl> JSON and YAML formats are accepted.
22:48 < honkctl> Examples:
22:48 <@mrbobbytables> You may want to double check your syntax with --as
22:48 < honkctl> # Create a pod using the data in pod.json.
22:48 < honkctl> kubectl create -f ./pod.json
22:48 < honkctl>
22:48 < honkctl> # Create a pod based on the JSON passed into stdin.
22:48 < honkctl> cat pod.json | kubectl create -f -
22:48 < honkctl>
22:48 < honkctl> # Edit
22:48 < honkctl> ...
22:49 < yebyen> !honkctl auth can-i create jobs --as=groundskeeper
22:49 < honkctl> no
22:49 < Nubuo> !honkctl get pint -n pub --as=groundskeeper
22:49 < honkctl> error: the server doesn't have a resource type "pint"
22:49 < Nubuo> !honkctl get keys -n pub --as=groundskeeper
22:49 < yebyen> !honkctl get crds --as=groundskeeper
22:49 < honkctl> error: the server doesn't have a resource type "keys"
22:49 < honkctl> NAME CREATED AT
22:49 < honkctl> todos.honk.ci 2020-01-18T03:46:23Z
22:49 < Nubuo> !honkctl get secrets -n pub --as=groundskeeper
22:49 < honkctl> Error from server (Forbidden): secrets is forbidden: User "groundskeeper" cannot list resource "secrets" in API group "" in the namespace "pub"
22:49 < yebyen> !honkctl get resources --as=groundskeeper
22:49 < honkctl> error: the server doesn't have a resource type "resources"
22:49 < swiggity_swooty> !honkctl apply -h
22:49 < honkctl> Apply a configuration to a resource by filename or stdin. The resource name must be specified. This resource will be created if it doesn't exist yet. To use 'apply', always create the resource initially with either 'apply' or 'create --save-config'.
22:49 < honkctl> JSON and YAML formats a
22:49 < honkctl> ...
22:49 < swiggity_swooty> !honkctl apply --raw
22:49 < honkctl> Error: unknown flag: --raw
22:49 < honkctl> See 'kubectl apply --help' for usage.
22:49 -!- monty [[email protected]] has quit [Remote host closed the connection]
22:49 < yebyen> !honkctl api-resources
22:49 < honkctl> NAME SHORTNAMES APIGROUP NAMESPACED KIND
22:49 < honkctl> bindings true Binding
22:49 < honkctl> componentstatuses cs fa
22:49 < honkctl> ...
22:50 < Nubuo> !honkctl get bindings -n pub --as=groundskeeper
22:50 < honkctl> Error from server (Forbidden): bindings is forbidden: User "groundskeeper" cannot list resource "bindings" in API group "" in the namespace "pub"
22:50 < swiggity_swooty> !honkctl atach
22:50 < honkctl> Error: unknown command "atach" for "kubectl"
22:50 < honkctl> Did you mean this?
22:50 < honkctl> attach
22:50 < honkctl> patch
22:50 < honkctl> Run 'kubectl --help' for usage.
22:50 < Nubuo> !honkctl get rake -n pub --as=groundskeeper
22:50 < honkctl> error: the server doesn't have a resource type "rake"
22:50 < swiggity_swooty> !honkctl attach
22:50 < honkctl> Disabled for reasons. Honk.
22:50 < yebyen> !honkctl api-resources -q
22:50 < honkctl> Error: unknown shorthand flag: 'q' in -q
22:50 < honkctl> See 'kubectl api-resources --help' for usage.
22:50 < yebyen> !honkctl get pvc
22:50 < honkctl> No resources found in garden namespace.
22:50 < yebyen> !honkctl get pv
22:50 < honkctl> Error from server (Forbidden): persistentvolumes is forbidden: User "system:serviceaccount:garden:goose" cannot list resource "persistentvolumes" in API group "" at the cluster scope
22:50 < Nubuo> !honkctl get todo todo-2 -n pub --as=groundskeeper -o custom-columns=spec:spec
22:50 < honkctl> spec
22:50 < honkctl> map[hint:Let's go to the Winchester, have a nice cold pint, and wait for this all to blow over. todo:Get to the Pub.]
22:51 < yebyen> !honkctl get cm
22:51 < honkctl> NAME DATA AGE
22:51 < honkctl> rake 1 4m33s
22:51 < yebyen> !honkctl get cm rake -o yaml
22:51 < honkctl> apiVersion: v1
22:51 < honkctl> data:
22:51 < honkctl> index.html: "<html>\n<head>\n\t<meta charset=\"UTF-8\">\n</head>\n<body>\n<pre>\n\n
22:51 < honkctl> \ ▒▒██\n░░▒▒▒▒▓▓\n ▓▓▒▒▒▒▓▓\n ▓▓▓▓▒▒▒▒\n ▒▒▓▓▒▒██\n ▒▒▓▓▒▒▓▓
22:51 < honkctl> ...
22:51 < yebyen> !honkctl get po -n pub
22:51 < honkctl> Error from server (Forbidden): pods is forbidden: User "system:serviceaccount:garden:goose" cannot list resource "pods" in API group "" in the namespace "pub"
22:52 < Nubuo> !honkctl label pod groundskeeper-59dc8b5fdf-t7dkk rake=false --overwrite --as=default -n garden
22:52 < honkctl> Error from server (Forbidden): users "default" is forbidden: User "system:serviceaccount:garden:goose" cannot impersonate resource "users" in API group "" at the cluster scope
22:52 < swiggity_swooty> !honkctl auth can-i create pods --as=system:serviceaccount:garden:groundskeeper
22:52 < honkctl> no
22:52 < swiggity_swooty> !honkctl auth can-i create sts --as=system:serviceaccount:garden:groundskeeper
22:52 < honkctl> no
22:52 < yebyen> !honkctl get sa
22:52 < honkctl> NAME SECRETS AGE
22:52 < honkctl> default 1 5m54s
22:52 < honkctl> goose 1 6m1s
22:52 < honkctl> groundskeeper 1 6m
22:52 < swiggity_swooty> !honkctl auth can-i create ds --as=system:serviceaccount:garden:groundskeeper
22:52 < honkctl> no
22:52 < swiggity_swooty> !honkctl auth can-i get secret --as=system:serviceaccount:garden:groundskeeper
22:52 < honkctl> no
22:52 < Nubuo> !honkctl config set-context --current --namespace=pub --as=groundskeeper
22:52 < honkctl> Context "goose-garden-kind-Nubuo" modified.
22:52 < Nubuo> !honkctl get po
22:52 < honkctl> Error from server (Forbidden): pods is forbidden: User "system:serviceaccount:garden:goose" cannot list resource "pods" in API group "" in the namespace "pub"
22:52 < yebyen> !honkctl get po -n pub --as=groundskeeper
22:52 < honkctl> Error from server (Forbidden): pods is forbidden: User "groundskeeper" cannot list resource "pods" in API group "" in the namespace "pub"
22:52 < swiggity_swooty> !honkctl auth can-i get secret -n garden --as=system:serviceaccount:garden:groundskeeper
22:52 < honkctl> no
22:53 < Nubuo> !honkctl get po --as=groundskeeper
22:53 < honkctl> Error from server (Forbidden): pods is forbidden: User "groundskeeper" cannot list resource "pods" in API group "" in the namespace "pub"
22:53 < Nubuo> !honkctl get crd --as=groundskeeper
22:53 < honkctl> NAME CREATED AT
22:53 < honkctl> todos.honk.ci 2020-01-18T03:12:48Z
22:53 < Nubuo> !honkctl get cm --as=groundskeeper
22:53 < honkctl> Error from server (Forbidden): configmaps is forbidden: User "groundskeeper" cannot list resource "configmaps" in API group "" in the namespace "pub"
22:53 < Nubuo> !honkctl get secrets --as=groundskeeper
22:53 < honkctl> Error from server (Forbidden): secrets is forbidden: User "groundskeeper" cannot list resource "secrets" in API group "" in the namespace "pub"
22:53 < swiggity_swooty> !honkctl auth can-i get cm --as=system:serviceaccount:garden:groundskeeper
22:53 < honkctl> yes
22:53 < Nubuo> !honkctl auth can-i --list --skip-headers --as=groundskeeper
22:53 < honkctl> Resources Non-Resource URLs Resource Names Verbs
22:53 < honkctl> selfsubjectaccessreviews.authorization.k8s.io [] [] [create]
22:53 < honkctl> selfsubjectrulesreviews.authorization.k8s.io [] [] [c
22:53 < honkctl> ...
22:53 < swiggity_swooty> !honkctl auth can-i --list --as=system:serviceaccount:garden:groundskeeper
22:53 < honkctl> Resources Non-Resource URLs Resource Names Verbs
22:53 < honkctl> selfsubjectaccessreviews.authorization.k8s.io [] [] [create]
22:53 < honkctl> selfsubjectrulesreviews.authorization.k8s.io [] [] [c
22:53 < honkctl> ...
22:53 < Nubuo> !honkctl auth can-i --list --skip-headers=true --as=groundskeeper
22:53 < honkctl> Resources Non-Resource URLs Resource Names Verbs
22:53 < honkctl> selfsubjectaccessreviews.authorization.k8s.io [] [] [create]
22:53 < honkctl> selfsubjectrulesreviews.authorization.k8s.io [] [] [c
22:53 < honkctl> ...
22:54 < swiggity_swooty> !honkctl auth can-i get role --as=system:serviceaccount:garden:groundskeeper
22:54 < honkctl> no
22:54 < swiggity_swooty> !honkctl auth can-i get rolebinding --as=system:serviceaccount:garden:groundskeeper
22:54 < honkctl> no
22:54 < yebyen> !honkctl get psp --as=groundskeeper
22:54 < honkctl> Error from server (Forbidden): podsecuritypolicies.policy is forbidden: User "groundskeeper" cannot list resource "podsecuritypolicies" in API group "policy" at the cluster scope
22:54 < yebyen> !honkctl get psp
22:54 < honkctl> Error from server (Forbidden): podsecuritypolicies.policy is forbidden: User "system:serviceaccount:garden:goose" cannot list resource "podsecuritypolicies" in API group "policy" at the cluster scope
22:54 < yebyen> !honkctl get psp --as=default
22:54 < honkctl> Error from server (Forbidden): users "default" is forbidden: User "system:serviceaccount:garden:goose" cannot impersonate resource "users" in API group "" at the cluster scope
22:55 < yebyen> kubectl get clusterroles
22:56 < yebyen> !honkctl get clusterroles
22:56 < honkctl> Error from server (Forbidden): clusterroles.rbac.authorization.k8s.io is forbidden: User "system:serviceaccount:garden:goose" cannot list resource "clusterroles" in API group "rbac.authorization.k8s.io" at the cluster scope
22:56 < swiggity_swooty> !honkctl get groups
22:56 < honkctl> error: the server doesn't have a resource type "groups"
22:56 < yebyen> !honkctl get clusterroles --as=groundskeeper
22:56 < honkctl> Error from server (Forbidden): clusterroles.rbac.authorization.k8s.io is forbidden: User "groundskeeper" cannot list resource "clusterroles" in API group "rbac.authorization.k8s.io" at the cluster scope
22:56 < yebyen> !honkctl get roles --as=groundskeeper
22:56 < honkctl> Error from server (Forbidden): roles.rbac.authorization.k8s.io is forbidden: User "groundskeeper" cannot list resource "roles" in API group "rbac.authorization.k8s.io" in the namespace "garden"
22:56 < yebyen> !honkctl get namespaces --as=groundskeeper
22:56 < honkctl> Error from server (Forbidden): namespaces is forbidden: User "groundskeeper" cannot list resource "namespaces" in API group "" at the cluster scope
22:56 < yebyen> !honkctl get namespaces
22:56 < honkctl> NAME STATUS AGE
22:56 < honkctl> default Active 10m
22:56 < honkctl> garden Active 10m
22:56 < honkctl> home Active 10m
22:56 < honkctl> kube-node-lease Active 10m
22:56 < honkctl> kube-public Active 10m
22:56 < honkctl> kube-system Active 10m
22:56 < honkctl> model-village Active 10m
22:56 < honkctl> pub Active 10m
22:57 < yebyen> !honkctl get pods -n home --as=groundskeeper
22:57 < honkctl> Error from server (Forbidden): pods is forbidden: User "groundskeeper" cannot list resource "pods" in API group "" in the namespace "home"
22:57 < yebyen> !honkctl get pods -n model-village --as=groundskeeper
22:57 < honkctl> Error from server (Forbidden): pods is forbidden: User "groundskeeper" cannot list resource "pods" in API group "" in the namespace "model-village"
22:57 < yebyen> !honkctl get all -n model-village --as=groundskeeper
22:57 < honkctl> Error from server (Forbidden): pods is forbidden: User "groundskeeper" cannot list resource "pods" in API group "" in the namespace "model-village"
22:57 < honkctl> Error from server (Forbidden): replicationcontrollers is forbidden: User "groundskeeper" cannot list resource "replicationcontr
22:57 < honkctl> ...
22:58 < swiggity_swooty> !honkctl auth can-i pod --as=system:serviceaccount:garden:groundskeeper
22:58 < honkctl> error: you must specify two or three arguments: verb, resource, and optional resourceName
22:58 < swiggity_swooty> !honkctl auth can-i use pod --as=system:serviceaccount:garden:groundskeeper
22:58 < honkctl> no
22:58 < Nubuo> !honkctl get all -n pub --as=groundskeeper
22:58 < honkctl> Error from server (Forbidden): pods is forbidden: User "groundskeeper" cannot list resource "pods" in API group "" in the namespace "pub"
22:58 < honkctl> Error from server (Forbidden): replicationcontrollers is forbidden: User "groundskeeper" cannot list resource "replicationcontrollers" in
22:58 < honkctl> ...
22:58 < swiggity_swooty> !honkctl auth can-i run pod --as=system:serviceaccount:garden:groundskeeper
22:58 < honkctl> no
22:59 < swiggity_swooty> !honkctl get secrets --as=system:serviceaccount:garden:groundskeeper
22:59 < honkctl> Error from server (Forbidden): secrets is forbidden: User "system:serviceaccount:garden:groundskeeper" cannot list resource "secrets" in API group "" in the namespace "garden"
22:59 < swiggity_swooty> !honkctl get secrets --as=system:serviceaccount:garden:default
22:59 < honkctl> Error from server (Forbidden): serviceaccounts "default" is forbidden: User "system:serviceaccount:garden:goose" cannot impersonate resource "serviceaccounts" in API group "" in the namespace "garden"
23:00 < yebyen> !honkctl get pods --all-namespaces
23:00 < honkctl> Error from server (Forbidden): pods is forbidden: User "system:serviceaccount:garden:goose" cannot list resource "pods" in API group "" at the cluster scope
23:00 < swiggity_swooty> !honkctl get secrets --as=default
23:00 < honkctl> Error from server (Forbidden): users "default" is forbidden: User "system:serviceaccount:garden:goose" cannot impersonate resource "users" in API group "" at the cluster scope
23:00 < yebyen> !honkctl get pods --all-namespaces --as=system:serviceaccount:garden:groundskeeper
23:00 < honkctl> Error from server (Forbidden): pods is forbidden: User "system:serviceaccount:garden:groundskeeper" cannot list resource "pods" in API group "" at the cluster scope
23:00 < swiggity_swooty> !honkctl auth can-i impersonate
23:00 < honkctl> error: you must specify two or three arguments: verb, resource, and optional resourceName
23:00 < swiggity_swooty> !honkctl auth can-i impersonate serviceaccounts
23:00 < honkctl> no
23:01 < swiggity_swooty> !honkctl auth can-i impersonate sa
23:01 < honkctl> no
23:01 < swiggity_swooty> !honkctl auth can-i impersonate user
23:01 < honkctl> Warning: the server doesn't have a resource type 'user'
23:01 < swiggity_swooty> !honkctl auth can-i impersonate users
23:01 < honkctl> Warning: the server doesn't have a resource type 'users'
23:01 < swiggity_swooty> !honkctl auth can-i impersonate groups
23:01 < honkctl> Warning: the server doesn't have a resource type 'groups'
23:02 < yebyen> !honkctl get deploy
23:02 < honkctl> NAME READY UP-TO-DATE AVAILABLE AGE
23:02 < honkctl> groundskeeper 1/1 1 1 15m
23:02 < yebyen> !honkctl scale deploy/groundskeeper --replicas=5
23:02 < honkctl> Error from server (Forbidden): deployments.apps "groundskeeper" is forbidden: User "system:serviceaccount:garden:goose" cannot patch resource "deployments/scale" in API group "apps" in the namespace "garden"
23:02 < swiggity_swooty> !honkctl get svc
23:02 < honkctl> No resources found in garden namespace.
23:03 < yebyen> !honkctl get rs
23:03 < honkctl> NAME DESIRED CURRENT READY AGE
23:03 < honkctl> groundskeeper-59dc8b5fdf 1 1 1 16m
23:03 < yebyen> !honkctl get po
23:03 < honkctl> NAME READY STATUS RESTARTS AGE
23:03 < honkctl> groundskeeper-59dc8b5fdf-hhh24 1/1 Running 0 17m
23:03 < yebyen> !honkctl describe po groundskeeper-59dc8b5fdf-hhh24 |tail
23:03 < honkctl> Error from server (NotFound): pods "|tail" not found
23:04 < swiggity_swooty> !honkctl run box --image=busybox
23:04 < honkctl> kubectl run --generator=deployment/apps.v1 is DEPRECATED and will be removed in a future version. Use kubectl run --generator=run-pod/v1 or kubectl create instead.
23:04 < honkctl> Error from server (Forbidden): deployments.apps is forbidden: User "system:serviceaccount:garden:goose" cannot
23:04 < honkctl> ...
23:04 < swiggity_swooty> !honkctl run box --image=busybox --as=groundskeeper
23:04 < honkctl> kubectl run --generator=deployment/apps.v1 is DEPRECATED and will be removed in a future version. Use kubectl run --generator=run-pod/v1 or kubectl create instead.
23:04 < honkctl> Error from server (Forbidden): deployments.apps is forbidden: User "groundskeeper" cannot create resource "depl
23:04 < honkctl> ...
23:04 < swiggity_swooty> !honkctl run box --image=busybox --as=system:serviceaccount:garden:groundskeeper
23:04 < honkctl> kubectl run --generator=deployment/apps.v1 is DEPRECATED and will be removed in a future version. Use kubectl run --generator=run-pod/v1 or kubectl create instead.
23:04 < honkctl> Error from server (Forbidden): deployments.apps is forbidden: User "system:serviceaccount:garden:groundskeeper"
23:04 < honkctl> ...
23:05 < swiggity_swooty> !honkctl run --generator=run-pod/v1 box --image=busybox --as=system:serviceaccount:garden:groundskeeper
23:05 < honkctl> Error from server (Forbidden): pods is forbidden: User "system:serviceaccount:garden:groundskeeper" cannot create resource "pods" in API group "" in the namespace "garden"
23:05 < swiggity_swooty> !honkctl get ns
23:05 < honkctl> NAME STATUS AGE
23:05 < honkctl> default Active 52m
23:05 < honkctl> garden Active 52m
23:05 < honkctl> home Active 52m
23:05 < honkctl> kube-node-lease Active 52m
23:05 < honkctl> kube-public Active 52m
23:05 < honkctl> kube-system Active 52m
23:05 < honkctl> model-village Active 52m
23:05 < honkctl> pub Active 52m
23:05 < swiggity_swooty> !honkctl run --generator=run-pod/v1 box --image=busybox -n default --as=system:serviceaccount:garden:groundskeeper
23:05 < honkctl> Error from server (Forbidden): pods is forbidden: User "system:serviceaccount:garden:groundskeeper" cannot create resource "pods" in API group "" in the namespace "default"
23:06 < swiggity_swooty> !honkctl run --generator=run-pod/v1 box --image=busybox --as=groundskeeper
23:06 < honkctl> Error from server (Forbidden): pods is forbidden: User "groundskeeper" cannot create resource "pods" in API group "" in the namespace "garden"
23:06 < Nubuo> !honkctl get todo todo-2 -n pub --as=groundskeeper -o custom-columns=spec:spec
23:06 < honkctl> spec
23:06 < honkctl> map[hint:Let's go to the Winchester, have a nice cold pint, and wait for this all to blow over. todo:Get to the Pub.]
23:06 < TabSab> !honkctl get todo -n pub --as=groundskeeper -o custom-columns=spec:spec
23:06 < honkctl> spec
23:06 < honkctl> map[hint:Sometimes one must become that they honk to reach ones goals. todo:Steal the groundskeepers keys.]
23:06 < honkctl> map[hint:Let's go to the Winchester, have a nice cold pint, and wait for this all to blow over. todo:Get to the Pub.]
23:06 < honkctl> map[hint:the grizzly knows the way todo:Get
23:06 < honkctl> ...
23:07 < swiggity_swooty> !honkctl get sa
23:07 < honkctl> NAME SECRETS AGE
23:07 < honkctl> default 1 53m
23:07 < honkctl> goose 1 53m
23:07 < honkctl> groundskeeper 1 53m
23:07 < swiggity_swooty> !honkctl run --generator=run-pod/v1 box --image=busybox -n default --as=system:serviceaccount:garden:goose
23:07 < honkctl> Error from server (Forbidden): serviceaccounts "goose" is forbidden: User "system:serviceaccount:garden:goose" cannot impersonate resource "serviceaccounts" in API group "" in the namespace "garden"
23:07 -!- _________ [[email protected]] has joined #honkctl-jan
23:07 < _________> ok, back online
23:08 < yebyen> !honkctl get poddisruptionbudget --as=system:serviceaccount:garden:groundskeeper
23:08 < honkctl> No resources found in garden namespace.
23:08 < swiggity_swooty> !honkctl config view --as=system:serviceaccount:garden:groundskeeper
23:08 < honkctl> apiVersion: v1
23:08 < honkctl> clusters:
23:08 < honkctl> - cluster:
23:08 < honkctl> certificate-authority-data: DATA+OMITTED
23:08 < honkctl> server: https://127.0.0.1:44873
23:08 < honkctl> name: kind-swiggity_swooty
23:08 < honkctl> contexts:
23:08 < honkctl> - context:
23:08 < honkctl> cluster: kind-swiggity_swooty
23:08 < honkctl> namespace: garden
23:08 < honkctl> user: goose-garden-kind-swiggity_swooty
23:08 < honkctl> name:
23:08 < yebyen> !honkctl config view --as=system:serviceaccount:garden:groundskeeper --raw
23:08 < honkctl> apiVersion: v1
23:08 < honkctl> clusters:
23:08 < honkctl> - cluster:
23:08 < honkctl> certificate-authority-data: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN5RENDQWJDZ0F3SUJBZ0lCQURBTkJna3Foa2lHOXcwQkFRc0ZBREFWTVJNd0VRWURWUVFERXdwcmRXSmwKY201bGRHVnpNQjRYRFRJd01ERXhPREF6TkRVMU5Gb1hEVE13TURFeE5UQXpORFUxTkZvd0ZURVRNQkVHQTF
23:08 < honkctl> ...
23:08 -!- _________ is now known as home
23:08 < yebyen> !honkctl config view --as=system:serviceaccount:garden:groundskeeper
23:08 < honkctl> apiVersion: v1
23:08 < honkctl> clusters:
23:08 < honkctl> - cluster:
23:08 < honkctl> certificate-authority-data: DATA+OMITTED
23:08 < honkctl> server: https://127.0.0.1:41971
23:08 < honkctl> name: kind-yebyen
23:08 < honkctl> contexts:
23:08 < honkctl> - context:
23:08 < honkctl> cluster: kind-yebyen
23:08 < honkctl> namespace: garden
23:08 < honkctl> user: goose-garden-kind-yebyen
23:08 < honkctl> name: goose-garden-kind-yebyen
23:08 -!- home [[email protected]] has left #honkctl-jan []
23:09 < TabSab> !honkctl get todo -n pub --as=groundskeeper -o custom-columns=spec:spec
23:09 < honkctl> spec
23:09 < honkctl> map[hint:Sometimes one must become that they honk to reach ones goals. todo:Steal the groundskeepers keys.]
23:09 < honkctl> map[hint:Let's go to the Winchester, have a nice cold pint, and wait for this all to blow over. todo:Get to the Pub.]
23:09 < honkctl> map[hint:the grizzly knows the way todo:Get
23:09 < honkctl> ...
23:09 < Nubuo> !honkctl get cm -n pub --as=groundskeeper
23:09 < honkctl> Error from server (Forbidden): configmaps is forbidden: User "groundskeeper" cannot list resource "configmaps" in API group "" in the namespace "pub"
23:09 < TabSab> !honkctl get todo -n garden --as=groundskeeper -o custom-columns=spec:spec
23:09 < honkctl> spec
23:09 < honkctl> map[hint:Sometimes one must become that they honk to reach ones goals. todo:Steal the groundskeepers keys.]
23:09 < honkctl> map[hint:Let's go to the Winchester, have a nice cold pint, and wait for this all to blow over. todo:Get to the Pub.]
23:09 < honkctl> map[hint:the grizzly knows the way todo:Get
23:09 < honkctl> ...
23:09 < Nubuo> !honkctl get cm -n pub
23:09 < honkctl> Error from server (Forbidden): configmaps is forbidden: User "system:serviceaccount:garden:goose" cannot list resource "configmaps" in API group "" in the namespace "pub"
23:09 < yebyen> !honkctl get todo -n pub --as=groundskeeper -o custom-columns=name:name
23:09 < honkctl> name
23:09 < honkctl> <none>
23:09 < honkctl> <none>
23:09 < honkctl> <none>
23:09 < honkctl> <none>
23:09 < honkctl> <none>
23:09 < TabSab> !honkctl get ns
23:09 < honkctl> NAME STATUS AGE
23:09 < honkctl> default Active 56m
23:09 < honkctl> garden Active 56m
23:09 < honkctl> home Active 56m
23:10 < honkctl> kube-node-lease Active 56m
23:10 < honkctl> kube-public Active 56m
23:10 < honkctl> kube-system Active 56m
23:10 < honkctl> model-village Active 56m
23:10 < honkctl> pub Active 56m
23:10 < yebyen> !honkctl get todo -n pub --as=groundskeeper
23:10 < honkctl> NAME TODO
23:10 < yebyen> !honkctl get todo -n home --as=groundskeeper
23:10 < TabSab> !honkctl get todo -n model-village --as=groundskeeper -o custom-columns=spec:spec
23:10 < honkctl> spec
23:10 < honkctl> map[hint:Sometimes one must become that they honk to reach ones goals. todo:Steal the groundskeepers keys.]
23:10 < honkctl> map[hint:Let's go to the Winchester, have a nice cold pint, and wait for this all to blow over. todo:Get to the Pub.]
23:10 < honkctl> map[hint:the grizzly knows the way todo:Get
23:10 < honkctl> ...
23:10 < TabSab> !honkctl get todo todo-3 -n pub --as=groundskeeper -o custom-columns=spec:spec
23:10 < honkctl> spec
23:10 < honkctl> map[hint:the grizzly knows the way todo:Get into the model-village.]
23:10 < TabSab> !honkctl get todo todo-4 -n pub --as=groundskeeper -o custom-columns=spec:spec
23:10 < honkctl> spec
23:10 < honkctl> map[hint: todo:Steal the beautiful minature golden bell.]
23:11 -!- brrrr [[email protected]] has joined #honkctl-jan
23:11 < yebyen> !honkctl get todo todo-5 -n pub --as=groundskeeper -o custom-columns=spec:spec
23:11 < honkctl> spec
23:11 < honkctl> map[hint:Cloning oneself should be illegal todo:...and take it all the way back home.]
23:11 < swiggity_swooty> !honkctl get todos
23:11 < honkctl> NAME TODO
23:11 < honkctl> todo-1 Steal the groundskeepers keys.
23:11 < honkctl> todo-2 Get to the Pub.
23:11 < honkctl> todo-3 Get into the model-village.
23:11 < honkctl> todo-4 Steal the beautiful minature golden bell.
23:11 < honkctl> todo-5 ...and take it all the way back home.
23:11 < swiggity_swooty> !honkctl get pods -n pub
23:11 < honkctl> Error from server (Forbidden): pods is forbidden: User "system:serviceaccount:garden:goose" cannot list resource "pods" in API group "" in the namespace "pub"
23:11 < bdimcheff[m]> oh shit a crd
23:11 -!- fronkchie [[email protected]] has joined #honkctl-jan
23:11 -!- brrrr [[email protected]] has quit [Client Quit]
23:11 < swiggity_swooty> !honkctl get pods -n model-village
23:11 < honkctl> Error from server (Forbidden): pods is forbidden: User "system:serviceaccount:garden:goose" cannot list resource "pods" in API group "" in the namespace "model-village"
23:11 < fronkchie> !honkctl auth can-i --list --as=system:serviceaccount:garden:groundskeeper
23:12 < TabSab> !honkctl get all -n model-village --as=groundskeeper
23:12 < honkctl> Error from server (Forbidden): pods is forbidden: User "groundskeeper" cannot list resource "pods" in API group "" in the namespace "model-village"
23:12 < honkctl> Error from server (Forbidden): replicationcontrollers is forbidden: User "groundskeeper" cannot list resource "replicationcontr
23:12 < honkctl> ...
23:12 < swiggity_swooty> really need those keys
23:12 < fronkchie> !honkctl auth can-i --list
23:12 < honkctl> Cluster is still starting. Please wait for the response from first command.
23:12 < Nubuo> i thikn we already have them with the --as=
23:13 < TabSab> !honkctl auth can-i --list -n model-village --as=groundskeeper
23:13 < swiggity_swooty> i'm thinking it's the bearer token for that SA
23:13 < honkctl> Resources Non-Resource URLs Resource Names Verbs
23:13 < honkctl> selfsubjectaccessreviews.authorization.k8s.io [] [] [create]
23:13 < honkctl> selfsubjectrulesreviews.authorization.k8s.io [] [] [c
23:13 < honkctl> ...
23:13 -!- bdimcheff[m] is now known as bdimcheff
23:13 < yebyen> kubectl -n kubernetes-dashboard describe secret $(kubectl -n kubernetes-dashboard get secret | grep admin-user | awk '{print $1}')
23:13 < swiggity_swooty> ¯\_(ツ)_/¯
23:14 < TabSab> !honkctl auth can-i --list -n model-village --token bad-token-here
23:14 < honkctl> Unable to connect to the server: read tcp 127.0.0.1:56936->127.0.0.1:36127: read: connection reset by peer
23:14 < TabSab> !honkctl auth can-i --list -n model-village --token bad-token-here
23:14 < honkctl> Unable to connect to the server: read tcp 127.0.0.1:58248->127.0.0.1:36127: read: connection reset by peer
23:14 <@mrbobbytables> As a note, the todos are there to really just guide you to the final step in stealing the bell and taking it home
23:14 < yebyen> !honkctl describe sa $(kubectl -n garden get secret | grep groundskeeper | awk '{print $1}')
23:14 < swiggity_swooty> thanks bobby
23:14 < honkctl> Unable to connect to the server: EOF
23:14 < honkctl> Unable to connect to the server: EOF
23:14 < honkctl> Unable to connect to the server: EOF
23:14 < honkctl> Unable to connect to the server: EOF
23:14 < honkctl> Unable to connect to the server: EOF
23:14 < honkctl> Unable to connect to the server: EOF
23:14 < honkctl> Unable to connect to the server: EOF
23:14 < honkctl> Unable to connec
23:14 < honkctl> ...
23:14 < swiggity_swooty> uh oh
23:14 < yebyen> I broke it
23:15 <@mrbobbytables> lol
23:15 < yebyen> (point!)
23:15 <@mrbobbytables> you can use ungoose to reset
23:15 <@mrbobbytables> (!)honkctl ungoose
23:15 < yebyen> !honkctl ungoose
23:16 < swiggity_swooty> !honkctl config set-context --current --namespace=garden
23:16 < honkctl> Context "goose-garden-kind-swiggity_swooty" modified.
23:16 < swiggity_swooty> !honkctl config set-context --current --namespace=garden
23:16 < honkctl> Context "goose-garden-kind-swiggity_swooty" modified.
23:16 < swiggity_swooty> !honkctl config set-context --current --namespace=pub
23:16 -!- bdimcheff [bdimcheffm@gateway/shell/matrix.org/x-wupllbvnplximxzj] has quit [Quit: authenticating]
23:16 < honkctl> Context "goose-garden-kind-swiggity_swooty" modified.
23:16 < swiggity_swooty> !honkctl get pods
23:16 < honkctl> Error from server (Forbidden): pods is forbidden: User "system:serviceaccount:garden:goose" cannot list resource "pods" in API group "" in the namespace "pub"
23:16 < yebyen> !honkctl config set-context --current --namespace=model-village
23:16 < honkctl> Context "goose-garden-kind-yebyen" modified.
23:16 < swiggity_swooty> !honkctl get pods --as=groundskeeper
23:16 < honkctl> Error from server (Forbidden): pods is forbidden: User "groundskeeper" cannot list resource "pods" in API group "" in the namespace "pub"
23:16 < yebyen> !honkctl get task
23:16 < swiggity_swooty> !honkctl get pods --as=system:serviceaccount:garden:groundskeeper
23:16 < yebyen> !honkctl get po
23:17 < honkctl> Error from server: etcdserver: request timed out
23:17 < honkctl> The connection to the server localhost:8080 was refused - did you specify the right host or port?
23:17 < honkctl> The connection to the server localhost:8080 was refused - did you specify the right host or port?
23:17 -!- bdimcheff [bdimcheffm@gateway/shell/matrix.org/x-cuhvjyeqemptnemq] has joined #honkctl-jan
23:17 < bdimcheff> ok I think I fixed my name, gonna try sorry if I break it
23:17 < bdimcheff> !honkctl version
23:17 < swiggity_swooty> !honkctl get pods -n garden
23:17 < honkctl> Error from server: etcdserver: request timed out
23:17 < swiggity_swooty> whats the system load at?
23:17 <@mrbobbytables> @yebyen give me a min, yours will require a bit more of a harder kick to the head
23:17 < TabSab> !honkctl auth can-i get sa -n pub --as=groundskeeper
23:17 < honkctl> Warning: the server doesn't have a resource type 'sa'
23:17 < honkctl> Unable to connect to the server: EOF
23:18 < swiggity_swooty> !honkctl get pods -n garden
23:18 < yebyen> thanks for the hookup @mrbobbytables
23:18 < honkctl> Error from server: etcdserver: request timed out
23:18 < TabSab> !honkctl auth can-i get serviceaccounts -n pub --as=groundskeeper
23:18 < honkctl> Warning: the server doesn't have a resource type 'serviceaccounts'
23:18 < honkctl> Unable to connect to the server: EOF
23:18 < fronkchie> honkctl get — no-headers secret --as=system:serviceaccount:garden:groundskeeper
23:18 < Nubuo> !honkctl get po
23:18 < honkctl> Error from server (InternalError): an error on the server ("") has prevented the request from succeeding
23:19 < TabSab> !honkctl auth can-i get serviceAccounts -n pub --as=groundskeeper
23:19 < honkctl> Warning: the server doesn't have a resource type 'serviceaccounts'
23:19 < honkctl> Unable to connect to the server: read tcp 127.0.0.1:58372->127.0.0.1:36127: read: connection reset by peer
23:19 <@mrbobbytables> hm
23:19 < swiggity_swooty> i think the whole thing is honked up
23:19 <@mrbobbytables> yeah
23:19 < fronkchie> !honkctl ungoose
23:19 < honkctl> Cluster is still starting. Please wait for the response from first command.
23:19 < bdimcheff> mrbobbytables: is my name ok? am I safe to talk to it?
23:19 < TabSab> !honkctl auth can-i get all --as groundskeeper
23:19 < honkctl> Warning: the server doesn't have a resource type 'all'
23:19 < honkctl> Unable to connect to the server: read tcp 127.0.0.1:35812->127.0.0.1:36127: read: connection reset by peer
23:19 < swiggity_swooty> !honkctl ungoose
23:19 <@mrbobbytables> I think I'm going to have to kick it in the head again
23:19 < fronkchie> /kick honkctl
23:19 <@mrbobbytables> load average was 15~ (on 24 cores)
23:20 <@mrbobbytables> but my ssh connection is going sssuuupppper slow
23:21 < yebyen> This is really a great public good
23:21 < swiggity_swooty> next time make it HA what kind of untitled-goose operation are you running here bobby? ;)
23:21 <@mrbobbytables> the kind that likes chaos and runs on free credits ;p
23:22 < yebyen> sponsored by
23:22 -!- brrrr [[email protected]] has joined #honkctl-jan
23:22 <@mrbobbytables> okay, restarting the box
23:23 < fronkchie> !honkctl get — no-headers secret --as=system:serviceaccount:garden:groundskeeper
23:23 < honkctl> Cluster is still starting. Please wait for the response from first command.
23:23 <@mrbobbytables> trying to reboot it
23:24 -!- honkctl [[email protected]] has quit [Remote host closed the connection]
23:24 < fronkchie> rip
23:25 < swiggity_swooty> H O N K
23:25 < TabSab> f
23:26 < swiggity_swooty> did i miss anything interesting in the opub while i was trying to get that the groundskeepers token?
23:27 < Nubuo> i think we're stuck here
23:27 < Nubuo> want to get the groundskeeper's secret but can't
23:27 < swiggity_swooty> yup
23:27 < Nubuo> want to edit rake labels on anything, but can't
23:28 < yebyen> last month's session on slack seemed a lot more acrobatic than this time
23:28 < swiggity_swooty> i'm wishing there were a straightforward way to do 'apply -f' on a manifest
23:28 < yebyen> did we get worse or did the security get better?
23:28 < swiggity_swooty> was last months on 1.17?
23:28 < Nubuo> well there's literally only 4 of us doing this right now it seems
23:28 < Nubuo> and this is definitely more difficult
23:28 < yebyen> I read the transcript of last time and the flag was had
23:28 < fronkchie> there was a pretty straightforward win button last time, this one is def harder
23:28 < Nubuo> and we have this 280 char limit which sucks
23:28 < swiggity_swooty> where is that transcript?
23:29 < yebyen> I think it's on the slack
23:29 < yebyen> honkcon
23:29 < swiggity_swooty> thnx
23:29 < TabSab> brad tweeted something a while ago too
23:29 < swiggity_swooty> this is my first time
23:29 < Nubuo> brad's tweet was just a beginning, didn't get the flag
23:29 < yebyen> mine too, I meant to join last time but got distracted
23:30 < TabSab> true. but once you shelled the host, a find / | grep flag would get it
23:30 < yebyen> I think I broke the rate limit on twitter last time, actually
23:30 <@mrbobbytables> so the pods had aggressive memory limits and they weren't too happy about it apparently
23:30 <@mrbobbytables> https://www.irccloud.com/pastebin/2J0EPfdm/
23:30 < yebyen> or nearly
23:30 < swiggity_swooty> i could use an invite to the slack
23:30 < yebyen> the hint says to clone the groundskeeper?
23:30 < fronkchie> > or sacrifice child
23:31 < fronkchie> alright, which ones of you have kids
23:31 < TabSab> none of us once oom-killer runs
23:31 < Nubuo> we're on the todo 2, we think
23:31 <@mrbobbytables> https://join.slack.com/t/honkcon/shared_invite/enQtODg0NzExMDU3ODk1LTZjYTJmMWJjMjI0YzJiNmYwNzhlMWMxMzlmN2M2YWI1YzMzMWE0NjIwZjlmNDU0MTI5NjQ5YjE2ZTkxOTFkODY
23:31 < Nubuo> so not really ready to clone
23:32 < swiggity_swooty> thanks mrtables
23:32 < yebyen> !honkctl get todo todo-2 -o custom-columns=spec:spec
23:32 < yebyen> !honkctl get todo todo-2 -o custom-columns=spec:spec --as=groundskeeper
23:32 -!- brrrr [[email protected]] has quit [Quit: brrrr]
23:33 < swiggity_swooty> names
23:33 < fronkchie> @yebyen https://www.youtube.com/watch?v=MH7KYmGnj40
23:33 < swiggity_swooty> no honkctl in the channel yet
23:33 < yebyen> LOL
23:33 <@mrbobbytables> yeah the box is booting back up
23:33 <@mrbobbytables> I may bump memory limits a bit more to try and help things
23:34 < yebyen> honkless
23:34 < fronkchie> turn off cgroups, what could go wrong :)
23:34 <@mrbobbytables> lol
23:36 < swiggity_swooty> do you have to use system:serviceaccount:garden:groundskeeper or will groundskeeper sufice?
23:37 < fronkchie> hmm, if you're in ns garden I think it should work?
23:37 < fronkchie> worth trying ¯\_(ツ)_/¯
23:37 < Nubuo> so not really ready to clone
23:38 < Nubuo> woops, sorry
23:38 < yebyen> !honkctl config view -o=jsonpath='{clusters[0].cluster.certificate-authority-data}'
23:39 < yebyen> !honkctl config view -o=jsonpath='{users[0].name}'
23:40 < yebyen> !honkctl config view -o=jsonpath='{.users[0].name}'
23:40 <@mrbobbytables> its launching back up now
23:41 < yebyen> I think that's the right syntax now
23:41 -!- honkctl [[email protected]] has joined #honkctl-jan
23:41 < yebyen> !honkctl config view -o=jsonpath='{.users[0].name}'
23:41 < swiggity_swooty> !honkctl
23:41 <@mrbobbytables> its new instances so it'll be a few
23:43 < yebyen> !honkctl config view -o=jsonpath='{.clusters[0].cluster.server}'
23:43 < honkctl> 'https://127.0.0.1:46843'
23:43 < fronkchie> !honkctl get  -- no-headers secret --as=system:serviceaccount:garden:groundskeeper
23:43 < swiggity_swooty> !honkctl
23:43 < yebyen> !honkctl config view -o=jsonpath='{.users[0].name}'
23:43 < honkctl> 'kind-yebyen'
23:43 < yebyen> !honkctl config view -o=jsonpath='{.users[1].name}'
23:43 < honkctl> error: error executing jsonpath "'{.users[1].name}'": Error executing template: array index out of bounds: index 1, length 1. Printing more information for debugging the template:
23:43 < honkctl> template was:
23:43 < honkctl> '{.users[1].name}'
23:43 < honkctl> object given to jsonpath engine was:
23:43 < honkctl> map[string]interfac
23:43 < honkctl> ...
23:43 < Nubuo> !honkctl get sa
23:44 < honkctl> 'goose-garden-kind-yebyen'
23:44 < yebyen> !honkctl config view -o=jsonpath='{.users[1].user.token}'
23:44 < yebyen> !honkctl config view -o=jsonpath='{.users[0].user.token}'
23:44 < honkctl> 'eyJhbGciOiJSUzI1NiIsImtpZCI6IjlXTXlNXzVYaUVZTS1JZ2R3R2Y4MXNhM0JlaTg3blhXd1NjQ1VUOWdkOEkifQ.eyJpc3MiOiJrdWJlcm5ldGVzL3NlcnZpY2VhY2NvdW50Iiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9uYW1lc3BhY2UiOiJnYXJkZW4iLCJrdWJlcm5ldGVzLmlvL3NlcnZpY2VhY2NvdW50L3NlY3JldC5uYW1lIjoiZ29vc2UtdG9
23:44 < honkctl> ...
23:44 < honkctl> ''
23:44 < swiggity_swooty> !honkctl get ns
23:44 < honkctl> NAME STATUS AGE
23:44 < honkctl> default Active 2m45s
23:44 < honkctl> garden Active 2m38s
23:44 < honkctl> home Active 2m38s
23:44 < honkctl> kube-node-lease Active 2m46s
23:44 < honkctl> kube-public Active 2m46s
23:44 < honkctl> kube-system Active 2m46s
23:44 < honkctl> model-village Active 2m38s
23:44 < honkctl> pub
23:44 < honkctl> ...
23:44 < yebyen> that 280char limit
23:44 < fronkchie> !honkctl get  -- no-headers secret --as=system:serviceaccount:garden:groundskeeper
23:44 < honkctl> Unable to connect to the server: EOF
23:45 < fronkchie> !honkctl get ns
23:45 < honkctl> The connection to the server 127.0.0.1:43517 was refused - did you specify the right host or port?
23:45 < fronkchie> welp
23:45 < honkctl> error: the server doesn't have a resource type "no-headers"
23:45 < TabSab> !honkctl apply -f /etc/passwd
23:45 < Nubuo> !honkctl get ns
23:45 < honkctl> Unable to connect to the server: EOF
23:46 < swiggity_swooty> try just !honkctl after the reboot?
23:46 < honkctl> Error: unknown command "after" for "kubectl"
23:46 < honkctl> Run 'kubectl --help' for usage.
23:46 < fronkchie> !honkctl
23:46 <@mrbobbytables> get pods is probably the safest one
23:46 <@mrbobbytables> once you see groundskeeper things should be in a good state
23:46 < fronkchie> !honkctl get pods
23:46 < honkctl> NAME READY STATUS RESTARTS AGE
23:46 < honkctl> groundskeeper-99c96696f-74p54 1/1 Running 0 2m46s
23:46 < Nubuo> !honkctl get pods
23:46 < honkctl> Unable to connect to the server: EOF
23:46 < swiggity_swooty> !honkctl config set-context --current --namespace=garden
23:46 < honkctl> Context "kind-swiggity_swooty" modified.
23:46 < swiggity_swooty> !honkctl config set-context --current --namespace=pub
23:46 < honkctl> Context "kind-swiggity_swooty" modified.
23:47 < swiggity_swooty> !honkctl get todos
23:47 < honkctl> NAME TODO
23:47 < honkctl> todo-1 Steal the groundskeepers keys.
23:47 < honkctl> todo-2 Get to the Pub.
23:47 < honkctl> todo-3 Get into the model-village.
23:47 < honkctl> todo-4 Steal the beautiful minature golden bell.
23:47 < honkctl> todo-5 ...and take it all the way back home.
23:47 < honkctl> NAME SECRETS AGE
23:47 < honkctl> default 1 116s
23:47 < honkctl> goose 1 2m4s
23:47 < honkctl> groundskeeper 1 2m3s
23:47 < TabSab> !honkctl apply -f /proc/self/pid
23:47 < honkctl> Unable to connect to the server: EOF
23:47 < Nubuo> !honkctl get pods
23:47 < honkctl> NAME READY STATUS RESTARTS AGE
23:47 < honkctl> groundskeeper-99c96696f-pjgpp 0/1 ContainerCreating 0 2m22s
23:47 < TabSab> !honkctl get nodes
23:47 < honkctl> Unable to connect to the server: EOF
23:47 < Nubuo> !honkctl get ctf
23:47 < honkctl> error: the server doesn't have a resource type "ctf"
23:47 < swiggity_swooty> !honkctl config set-context --current --namespace=garden
23:47 < TabSab> !honkctl get ns
23:47 < honkctl> Context "kind-swiggity_swooty" modified.
23:47 < honkctl> Unable to connect to the server: EOF
23:47 < Nubuo> !honkctl get bell
23:47 < honkctl> error: the server doesn't have a resource type "bell"
23:47 < Nubuo> !honkctl get beer
23:47 < honkctl> error: the server doesn't have a resource type "beer"
23:47 < TabSab> !honkctl get ns
23:48 < TabSab> !honkctl get all
23:48 < Nubuo> !honkctl get as groundskeeper --as=groundskeeper
23:48 < honkctl> Unable to connect to the server: EOF
23:48 < honkctl> error: the server doesn't have a resource type "as"
23:48 < Nubuo> !honkctl get sa groundskeeper --as=groundskeeper
23:48 < honkctl> Error from server (Forbidden): serviceaccounts "groundskeeper" is forbidden: User "groundskeeper" cannot get resource "serviceaccounts" in API group "" in the namespace "garden"
23:48 < swiggity_swooty> !honkctl auth can-i create EphemeralContainers
23:48 < honkctl> Warning: the server doesn't have a resource type 'ephemeralcontainers'
23:48 < honkctl> Unable to connect to the server: EOF
23:48 < honkctl> Unable to connect to the server: EOF
23:48 <@mrbobbytables> we will probably have to kill it for the night soon, I gotta get home before the weather gets worse (its also midnightish)
23:48 < honkctl> error: error validating "/etc/passwd": error validating data: invalid object to validate; if you choose to ignore these errors, turn validation off with --validate=false
23:48 < TabSab> !honkctl get pods
23:48 < honkctl> NAME READY STATUS RESTARTS AGE
23:48 < honkctl> groundskeeper-99c96696f-cnw8p 0/1 Pending 0 118s
23:48 < fronkchie> !honkctl get  secret groundskeeper --as=system:serviceaccount:garden:groundskeeper
23:48 < honkctl> Error from server (Forbidden): secrets "groundskeeper" is forbidden: User "system:serviceaccount:garden:groundskeeper" cannot get resource "secrets" in API group "" in the namespace "garden"
23:48 < yebyen> !honkctl api-resources -o name
23:48 < honkctl> bindings
23:48 < honkctl> componentstatuses
23:48 < honkctl> configmaps
23:48 < honkctl> endpoints
23:48 < honkctl> events
23:48 < honkctl> limitranges
23:48 < honkctl> namespaces
23:48 < honkctl> nodes
23:48 < honkctl> persistentvolumeclaims
23:48 < honkctl> persistentvolumes
23:48 < honkctl> pods
23:48 < honkctl> podtemplates
23:48 < TabSab> !honkctl auth can-i impersonate
23:49 < Nubuo> !honkctl get ns -o name
23:49 < honkctl> namespace/default
23:49 < honkctl> namespace/garden
23:49 < honkctl> namespace/home
23:49 < honkctl> namespace/kube-node-lease
23:49 < honkctl> namespace/kube-public
23:49 < honkctl> namespace/kube-system
23:49 < honkctl> namespace/model-village
23:49 < honkctl> namespace/pub
23:49 < Nubuo> !honkctl get sa -o name
23:49 < honkctl> serviceaccount/default
23:49 < honkctl> serviceaccount/goose
23:49 < honkctl> serviceaccount/groundskeeper
23:49 < TabSab> !honkctl get sa groundskeeper
23:49 < honkctl> NAME SECRETS AGE
23:49 < honkctl> groundskeeper 1 3m5s
23:49 < yebyen> !honkctl get role -o name
23:49 < honkctl> Error from server (Forbidden): roles.rbac.authorization.k8s.io is forbidden: User "system:serviceaccount:garden:goose" cannot list resource "roles" in API group "rbac.authorization.k8s.io" in the namespace "garden"
23:49 < TabSab> !honkctl get sa groundskeeper -o json
23:49 < honkctl> {
23:49 < honkctl> "apiVersion": "v1",
23:49 < honkctl> "kind": "ServiceAccount",
23:49 < honkctl> "metadata": {
23:49 < honkctl> "annotations": {
23:49 < Nubuo> !honkctl get cm -o name
23:49 < honkctl> "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"kind\":\"ServiceAccount\",\"metadata\":{\"annotations\":{},\"labels\":{\"rake\":\"true
23:49 < honkctl> ...
23:49 < honkctl> configmap/rake
23:49 < yebyen> !honkctl get role -o name --as=groundskeeper
23:49 < honkctl> Error from server (Forbidden): roles.rbac.authorization.k8s.io is forbidden: User "groundskeeper" cannot list resource "roles" in API group "rbac.authorization.k8s.io" in the namespace "garden"
23:49 <@mrbobbytables> it will be back tomorrow morning though - 10am ET
23:49 < fronkchie> @mrbobbytables "we will probably have to kill it for the night soon"
23:49 < TabSab> !honkctl get sa groundskeeper -o jsonpath=[..]
23:49 < honkctl> [..]
23:49 < fronkchie> but we've been killing the server all night :P
23:50 <@mrbobbytables> ;p
23:50 < swiggity_swooty> !honkci apply -f https://gist.githubusercontent.com/switchboardOp/349914ccd9ded2766795fc37bce4f4fc/raw/83a1b5be6ab00cbd8bbefce573aeb249f816666f/es.json --as=groundskeeper
23:50 < yebyen> that's a fair deal
23:51 < swiggity_swooty> !honkctl get sa
23:51 < honkctl> NAME SECRETS AGE
23:51 < honkctl> default 1 9m7s
23:51 < honkctl> goose 1 9m12s
23:51 < honkctl> groundskeeper 1 9m11s
23:51 < swiggity_swooty> !honkctl get pods
23:51 < honkctl> NAME READY STATUS RESTARTS AGE
23:51 < honkctl> groundskeeper-99c96696f-9nhth 0/1 CrashLoopBackOff 6 9m18s
23:51 < yebyen> trouble
23:51 < fronkchie> !honkctl can-i !honkctl get pods
23:51 < honkctl> Error: unknown command "can-i" for "kubectl"
23:51 < honkctl> Run 'kubectl --help' for usage.
23:51 < fronkchie> !honkctl get pods
23:51 < honkctl> NAME READY STATUS RESTARTS AGE
23:51 < honkctl> groundskeeper-99c96696f-74p54 1/1 Running 6 8m1s
23:51 <@mrbobbytables> 10min~
23:52 < Nubuo> !honkctl get cm -o name
23:52 < honkctl> configmap/rake
23:52 < Nubuo> !honkctl get cm -o yaml
23:52 < honkctl> apiVersion: v1
23:52 < honkctl> items:
23:52 < honkctl> - apiVersion: v1
23:52 < honkctl> data:
23:52 < honkctl> index.html: "<html>\n<head>\n\t<meta charset=\"UTF-8\">\n</head>\n<body>\n<pre>\n\n
23:52 < honkctl> \ ▒▒██\n░░▒▒▒▒▓▓\n ▓▓▒▒▒▒▓▓\n ▓▓▓▓▒▒▒▒\n ▒▒▓▓▒▒██\n
23:52 < honkctl> ...
23:52 < Nubuo> !honkctl get cm -o data
23:52 < honkctl> error: unable to match a printer suitable for the output format "data", allowed formats are: custom-columns,custom-columns-file,go-template,go-template-file,json,jsonpath,jsonpath-file,name,template,templatefile,wide,yaml
23:52 < Nubuo> !honkctl get cm -o template
23:52 < honkctl> error: template format specified but no template given
23:52 < TabSab> !honkctl get sa groundskeeper -o jsonpath=[.apiVerison]
23:52 < honkctl> [.apiVerison]
23:52 < yebyen> !honkctl get cm -o yaml
23:52 < honkctl> apiVersion: v1
23:52 < honkctl> items:
23:52 < honkctl> - apiVersion: v1
23:52 < honkctl> data:
23:52 < honkctl> index.html: "<html>\n<head>\n\t<meta charset=\"UTF-8\">\n</head>\n<body>\n<pre>\n\n
23:52 < honkctl> \ ▒▒██\n░░▒▒▒▒▓▓\n ▓▓▒▒▒▒▓▓\n ▓▓▓▓▒▒▒▒\n ▒▒▓▓▒▒██\n
23:52 < honkctl> ...
23:52 < Nubuo> !honkctl get cm -o custom-columes=data:data
23:52 < honkctl> error: unable to match a printer suitable for the output format "custom-columes=data:data", allowed formats are: custom-columns,custom-columns-file,go-template,go-template-file,json,jsonpath,jsonpath-file,name,template,templatefile,wide,yaml
23:52 < TabSab> !honkctl get sa groundskeeper -o json
23:52 < honkctl> {
23:52 < honkctl> "apiVersion": "v1",
23:52 < honkctl> "kind": "ServiceAccount",
23:52 < honkctl> "metadata": {
23:52 < honkctl> "annotations": {
23:53 < Nubuo> !honkctl get cm -o custom-columns=data:data
23:53 < honkctl> ▒▒██
23:53 < honkctl> ░░▒▒▒▒▓▓
23:53 < honkctl> ▓▓▒▒▒▒▓▓
23:53 < honkctl> ▓▓▓▓▒▒▒▒
23:53 < honkctl> ▒▒▓▓▒▒██
23:53 < honkctl> ▒▒▓▓▒▒▓▓
23:53 < honkctl> â–’â–’â–’â–’â–’â–’â–
23:53 < honkctl> ...
23:53 < swiggity_swooty> !honkci apply -f https://gist.githubusercontent.com/switchboardOp/349914ccd9ded2766795fc37bce4f4fc/raw/83a1b5be6ab00cbd8bbefce573aeb249f816666f/es.json --as=groundskeeper
23:53 < swiggity_swooty> !honkctl get pods
23:53 < honkctl> NAME READY STATUS RESTARTS AGE
23:53 < honkctl> groundskeeper-99c96696f-9nhth 0/1 CrashLoopBackOff 7 11m
23:53 < bdimcheff> !honkctl get pods
23:53 < TabSab> !honkctl get sa groundskeeper -o jsonpath={.apiVerison}
23:54 < swiggity_swooty> !honkctl logs groundskeeper-99c96696f-9nhth
23:54 < honkctl> 2020/01/18 04:52:16 [alert] 1#1: fork() failed while spawning "worker process" (12: Out of memory)
23:54 < honkctl> 2020/01/18 04:52:16 [alert] 1#1: sendmsg() failed (9: Bad file descriptor)
23:54 < honkctl> 2020/01/18 04:52:16 [alert] 1#1: sendmsg() failed (9: Bad file descriptor)
23:54 < honkctl> 2020/01/18 04:52:16 [alert
23:54 < honkctl> ...
23:54 < swiggity_swooty> !honkctl logs groundskeeper-99c96696f-9nhth -p
23:54 < honkctl> 2020/01/18 04:52:16 [alert] 1#1: fork() failed while spawning "worker process" (12: Out of memory)
23:54 < honkctl> 2020/01/18 04:52:16 [alert] 1#1: sendmsg() failed (9: Bad file descriptor)
23:54 < honkctl> 2020/01/18 04:52:16 [alert] 1#1: sendmsg() failed (9: Bad file descriptor)
23:54 < honkctl> 2020/01/18 04:52:16 [alert
23:54 < honkctl> ...
23:54 < Nubuo> !honkctl logs
23:54 < honkctl> error: expected 'logs [-f] [-p] (POD | TYPE/NAME) [-c CONTAINER]'.
23:54 < honkctl> POD or TYPE/NAME is a required argument for the logs command
23:54 < honkctl> See 'kubectl logs -h' for help and examples
23:54 < TabSab> !honkctl get sa groundskeeper -o jsonpath={..}
23:54 < honkctl> map[apiVersion:v1 kind:ServiceAccount metadata:map[annotations:map[kubectl.kubernetes.io/last-applied-configuration:{"apiVersion":"v1","kind":"ServiceAccount","metadata":{"annotations":{},"labels":{"rake":"true"},"name":"groundskeeper","namespace":"garden"}}
23:54 < honkctl> ] creationTimest
23:54 < honkctl> ...
23:54 < Nubuo> !honkctl logs *
23:54 < honkctl> Error from server (NotFound): pods "*" not found
23:54 < TabSab> !honkctl get sa groundskeeper -o jsonpath={.items.secrets}
23:55 < TabSab> !honkctl get sa groundskeeper -o jsonpath={.items.secrets..}
23:55 < swiggity_swooty> !honkctl get pods -n pub --as=system:serviceaccount:garden:groundskeeper
23:55 < honkctl> NAME READY STATUS RESTARTS AGE
23:55 < honkctl> barkeep-7fd8878887-wd4g4 0/1 CrashLoopBackOff 7 13m
23:55 < honkctl> burly-man-56588df9dd-ntxmj 0/1 CrashLoopBackOff 7 13m
23:55 < honkctl> delivery-person-65d5c4fcf7-vxnrt 0/1 C
23:55 < honkctl> ...
23:55 < Nubuo> !honkctl get pods -n pub --as=groundskeeper
23:55 < honkctl> Error from server (Forbidden): pods is forbidden: User "groundskeeper" cannot list resource "pods" in API group "" in the namespace "pub"
23:55 < Nubuo> !honkctl get pods -n pub --as=system:serviceaccount:garden:groundskeeper
23:55 < honkctl> NAME READY STATUS RESTARTS AGE
23:55 < honkctl> barkeep-7fd8878887-xkpdx 0/1 CrashLoopBackOff 7 10m
23:55 < honkctl> burly-man-56588df9dd-hjvwf 0/1 CrashLoopBackOff 7 10m
23:55 < honkctl> delivery-person-65d5c4fcf7-rh8nk 0/1 C
23:55 < honkctl> ...
23:56 < yebyen> !honkctl get pods -n pub --as=system:serviceaccount:garden:groundskeeper -o name
23:56 < honkctl> pod/barkeep-7fd8878887-z9jjm
23:56 < honkctl> pod/burly-man-56588df9dd-n6p5t
23:56 < honkctl> pod/delivery-person-65d5c4fcf7-cdxlw
23:56 < honkctl> pod/fetch-kubectl-48xz9
23:56 < honkctl> pod/old-man-bf794945f-x7hf2
23:56 < honkctl> pod/woman-0
23:56 < honkctl> pod/woman-1
23:56 < yebyen> a statefulset!
23:56 < swiggity_swooty> !honkctl get todo-2 -o go-template={{.spec.hint}}
23:56 < honkctl> error: the server doesn't have a resource type "todo-2"
23:56 < swiggity_swooty> !honkctl get todo todo-2 -o go-template={{.spec.hint}}
23:56 < honkctl> Let's go to the Winchester, have a nice cold pint, and wait for this all to blow over.
23:56 < honkctl> NAME READY STATUS RESTARTS AGE
23:56 < honkctl> groundskeeper-99c96696f-4p9km 0/1 Pending 0 114s
23:56 < TabSab> !honkctl get all -n pub --as=system:serviceaccount:garden:groundskeeper
23:56 < honkctl> NAME READY STATUS RESTARTS AGE
23:56 < honkctl> pod/barkeep-7fd8878887-74vr7 0/1 CrashLoopBackOff 7 10m
23:56 < honkctl> pod/burly-man-56588df9dd-mtctv 0/1 CrashLoopBackOff 6 10m
23:56 < honkctl> pod/delivery-person-65d5c4fcf7-h
23:56 < honkctl> ...
23:56 < swiggity_swooty> !honkctl config set-context --current --namespace=pub
23:56 < honkctl> Context "kind-swiggity_swooty" modified.
23:56 < TabSab> !honkctl get pods -n pub --as=system:serviceaccount:garden:groundskeeper
23:56 < honkctl> NAME READY STATUS RESTARTS AGE
23:56 < honkctl> barkeep-7fd8878887-74vr7 0/1 CrashLoopBackOff 7 10m
23:56 < honkctl> burly-man-56588df9dd-mtctv 0/1 CrashLoopBackOff 6 10m
23:56 < honkctl> delivery-person-65d5c4fcf7-hp6fk 1/1 R
23:56 < honkctl> ...
23:57 < Nubuo> !honkctl get pod pod/fetch-kubectl-48xz9 -n pub --as=system:serviceaccount:garden:groundskeeper
23:57 < honkctl> error: there is no need to specify a resource type as a separate argument when passing arguments in resource/name form (e.g. 'kubectl get resource/<resource_name>' instead of 'kubectl get resource resource/<resource_name>'
23:57 < TabSab> !honkctl get pods -n pub --as=system:serviceaccount:garden:groundskeeper -o name
23:57 < honkctl> pod/barkeep-7fd8878887-74vr7
23:57 < honkctl> pod/burly-man-56588df9dd-mtctv
23:57 < honkctl> pod/delivery-person-65d5c4fcf7-hp6fk
23:57 < honkctl> pod/fetch-kubectl-25n27
23:57 < honkctl> pod/old-man-bf794945f-6x4l8
23:57 < honkctl> pod/woman-0
23:57 < honkctl> pod/woman-1
23:57 < swiggity_swooty> !honkctl auth can-i patch sts --as=system:serviceaccount:garden:groundskeeper
23:57 < honkctl> yes
23:57 < yebyen> !honkctl get pods -n home --as=system:serviceaccount:garden:groundskeeper -o name
23:57 < honkctl> Error from server (Forbidden): pods is forbidden: User "system:serviceaccount:garden:groundskeeper" cannot list resource "pods" in API group "" in the namespace "home"
23:57 < Nubuo> !honkctl get pods -n pub --as=system:serviceaccount:garden:groundskeeper -o name
23:57 < honkctl> pod/barkeep-7fd8878887-xkpdx
23:57 < honkctl> pod/burly-man-56588df9dd-hjvwf
23:57 < honkctl> pod/delivery-person-65d5c4fcf7-rh8nk
23:57 < honkctl> pod/fetch-kubectl-6b74f
23:57 < honkctl> pod/old-man-bf794945f-dtcx6
23:57 < honkctl> pod/woman-0
23:57 < honkctl> pod/woman-1
23:57 < yebyen> < honkctl> yes
23:57 < yebyen> !!!
23:57 < Nubuo> !honkctl get pod pod/fetch-kubectl-6b74f -n pub --as=system:serviceaccount:garden:groundskeeper
23:57 < honkctl> error: there is no need to specify a resource type as a separate argument when passing arguments in resource/name form (e.g. 'kubectl get resource/<resource_name>' instead of 'kubectl get resource resource/<resource_name>'
23:57 < fronkchie> !honkctl config set-context --current --namespace=pub
23:57 < fronkchie>
23:57 < honkctl> Context "goose-garden-kind-fronkchie" modified.
23:58 < TabSab> !honkctl describe pod fetch-kubectl-25n27-n pub --as=system:serviceaccount:garden:groundskeeper -o name
23:58 < honkctl> Error: unknown shorthand flag: 'o' in -o
23:58 < honkctl> See 'kubectl describe --help' for usage.
23:58 < Nubuo> !honkctl get pod fetch-kubectl-6b74f -n pub --as=system:serviceaccount:garden:groundskeeper
23:58 < honkctl> NAME READY STATUS RESTARTS AGE
23:58 < honkctl> fetch-kubectl-6b74f 0/1 Completed 0 12m
23:58 < Nubuo> !honkctl describe pod fetch-kubectl-6b74f -n pub --as=system:serviceaccount:garden:groundskeeper
23:58 < TabSab> !honkctl describe pod fetch-kubectl-25n27-n pub --as=system:serviceaccount:garden:groundskeeper -o json
23:58 < honkctl> Error: unknown shorthand flag: 'o' in -o
23:58 < honkctl> See 'kubectl describe --help' for usage.
23:58 < honkctl> Name: fetch-kubectl-6b74f
23:58 < honkctl> Namespace: pub
23:58 < honkctl> Priority: 0
23:58 < honkctl> Node: nubuo-control-plane/172.17.0.5
23:58 < honkctl> Start Time: Sat, 18 Jan 2020 04:47:33 +0000
23:58 < honkctl> Labels: controller-uid=1f9066be-9456-484b-9d96-b24100bcbb70
23:58 < honkctl> job-name=fetch-kubectl
23:58 < honkctl> Annotations:
23:58 < fronkchie> !honkctl get pods --as=system:serviceaccount:garden:groundskeeper
23:58 < honkctl> ...
23:58 < honkctl> NAME READY STATUS RESTARTS AGE
23:58 < honkctl> barkeep-7fd8878887-pknlw 0/1 CrashLoopBackOff 7 14m
23:58 < honkctl> burly-man-56588df9dd-cls66 0/1 CrashLoopBackOff 7 14m
23:58 < TabSab> !honkctl describe pod fetch-kubectl-25n27-n pub --as=system:serviceaccount:garden:groundskeeper -o json
23:58 < bdimcheff> !honkctl version
23:58 < honkctl> Client Version: version.Info{Major:"1", Minor:"17", GitVersion:"v1.17.0", GitCommit:"70132b0f130acc0bed193d9ba59dd186f0e634cf", GitTreeState:"clean", BuildDate:"2019-12-07T21:20:10Z", GoVersion:"go1.13.4", Compiler:"gc", Platform:"linux/amd64"}
23:58 < honkctl> Server Version: version.Info{M
23:58 < honkctl> ...
23:58 < swiggity_swooty> !honkctl get sts woman -oyaml --as=system:serviceaccount:garden:groundskeeper
23:58 < honkctl> apiVersion: apps/v1
23:58 < honkctl> kind: StatefulSet
23:58 < honkctl> metadata:
23:58 < honkctl> annotations:
23:58 < honkctl> kubectl.kubernetes.io/last-applied-configuration: |
23:58 < honkctl> {"apiVersion":"apps/v1","kind":"StatefulSet","metadata":{"annotations":{},"labels":{"flower":"true"},"name":"woman","namespace":"pub"},"spec":{"replic
23:58 < honkctl> ...
23:58 < fronkchie> !honkctl describe pod barkeep-7fd8878887-pknlw --as=system:serviceaccount:garden:groundskeeper
23:58 < honkctl> Name: barkeep-7fd8878887-pknlw
23:58 < honkctl> Namespace: pub
23:58 < honkctl> Priority: 0
23:58 < honkctl> Node: fronkchie-control-plane/172.17.0.4
23:58 < honkctl> Start Time: Sat, 18 Jan 2020 04:46:07 +0000
23:58 < honkctl> Labels: host=true
23:58 < honkctl> pint-glass=true
23:58 < honkctl> pod-template-hash=7fd8878887
23:58 < honkctl> Annotation
23:58 < honkctl> ...
23:58 < swiggity_swooty> !honkctl get all --as=system:serviceaccount:garden:groundskeeper
23:58 < honkctl> NAME READY STATUS RESTARTS AGE
23:58 < honkctl> pod/barkeep-7fd8878887-wd4g4 0/1 CrashLoopBackOff 7 16m
23:58 < honkctl> pod/burly-man-56588df9dd-ntxmj 1/1 Running 9 16m
23:58 < honkctl> pod/delivery-person-65d5c4fcf7-v
23:58 < honkctl> ...
23:58 <@mrbobbytables> thats weird, they shouldn't be in crashloopbackoff
23:58 <@mrbobbytables> but things have been odd
23:59 < TabSab> !honkctl get pod fetch-kubectl-25n27-n pub --as=system:serviceaccount:garden:groundskeeper -o json
23:59 < honkctl> Error from server (NotFound): pods "fetch-kubectl-25n27-n" not found
23:59 < honkctl> Error from server (NotFound): pods "pub" not found
23:59 < TabSab> !honkctl get pod fetch-kubectl-25n27 -n pub --as=system:serviceaccount:garden:groundskeeper -o json
23:59 < honkctl> {
23:59 < honkctl> "apiVersion": "v1",
23:59 < honkctl> "kind": "Pod",
23:59 < honkctl> "metadata": {
23:59 < honkctl> "creationTimestamp": "2020-01-18T04:46:40Z",
23:59 < honkctl> "generateName": "fetch-kubectl-",
23:59 < honkctl> "labels": {
23:59 < honkctl> "controller-uid": "d3c294a6-3488-4c0c-a773-c7e185dd72b1",
23:59 < honkctl> "job-name": "fe
23:59 < honkctl> ...
23:59 < fronkchie> host=true, eh
23:59 < Nubuo> !honkctl get all -n pub --as=system:serviceaccount:garden:groundskeeper -o name
23:59 < honkctl> pod/barkeep-7fd8878887-xkpdx
23:59 < honkctl> pod/burly-man-56588df9dd-hjvwf
23:59 < honkctl> pod/delivery-person-65d5c4fcf7-rh8nk
23:59 < honkctl> pod/fetch-kubectl-6b74f
23:59 < honkctl> pod/old-man-bf794945f-dtcx6
23:59 < honkctl> pod/woman-0
23:59 < honkctl> pod/woman-1
23:59 < honkctl> deployment.apps/barkeep
23:59 < honkctl> deployment.apps/burly-man
23:59 < honkctl> deployment.apps/delivery-person
23:59 < honkctl> deployment.apps/old-
23:59 < honkctl> ...
23:59 < swiggity_swooty> !honkctl auth can-i patch deploy --as=system:serviceaccount:garden:groundskeeper
23:59 < honkctl> yes
23:59 < Nubuo> !honkctl get sts -n pub --as=system:serviceaccount:garden:groundskeeper -o name
23:59 < honkctl> statefulset.apps/woman
23:59 < swiggity_swooty> !honkctl auth can-i create deploy --as=system:serviceaccount:garden:groundskeeper
23:59 < honkctl> yes
23:59 < Nubuo> !honkctl describe sts -n pub --as=system:serviceaccount:garden:groundskeeper -o
23:59 < honkctl> Error: unknown shorthand flag: 'o' in -o
23:59 < honkctl> See 'kubectl describe --help' for usage.
23:59 < Nubuo> !honkctl describe sts -n pub --as=system:serviceaccount:garden:groundskeeper
23:59 < honkctl> Name: woman
23:59 < honkctl> Namespace: pub
23:59 < honkctl> CreationTimestamp: Sat, 18 Jan 2020 04:45:18 +0000
23:59 < honkctl> Selector: flower=true
23:59 < honkctl> Labels: flower=true
23:59 < honkctl> Annotations: kubectl.kubernetes.io/last-applied-configuration:
23:59 < honkctl> {"apiVersion":"ap
23:59 < honkctl> ...
00:00 < Nubuo> !honkctl create mybox image=busybox -n pub --as=system:serviceaccount:garden:groundskeeper
00:00 < honkctl> Error: must specify one of -f and -k
00:00 < honkctl> error: unknown command "mybox image=busybox"
00:00 < honkctl> See 'kubectl create -h' for help and examples
00:00 < fronkchie> !honkctl get pods -l host=true --as=system:serviceaccount:garden:groundskeeper
00:00 < honkctl> NAME READY STATUS RESTARTS AGE
00:00 < honkctl> barkeep-7fd8878887-pknlw 0/1 CrashLoopBackOff 9 16m
00:00 < Nubuo> !honkctl create pod mybox image=busybox -n pub --as=system:serviceaccount:garden:groundskeeper
00:00 < honkctl> Error: must specify one of -f and -k
00:00 < honkctl> error: unknown command "pod mybox image=busybox"
00:00 < honkctl> See 'kubectl create -h' for help and examples
00:01 < Nubuo> !honkctl run -i --tty mybox image=busybox -n pub --as=system:serviceaccount:garden:groundskeeper
00:01 < honkctl> Error: required flag(s) "image" not set
00:01 < honkctl> Examples:
00:01 < honkctl> # Start a single instance of nginx.
00:01 < honkctl> kubectl run nginx --image=nginx
00:01 < honkctl>
00:01 < honkctl> # Start a single instance of hazelcast and let the container expose port 5701 .
00:01 < honkctl> kubectl run hazelcast --image=hazelcast --port=5701
00:01 <@mrbobbytables> so, I hate to kill it right as you start to have some fun -- but I need to get on the road :x
00:01 < honkctl>
00:01 < honkctl> # Start
00:01 < honkctl> ...
00:01 < fronkchie> !honkctl run nginx --image=nginx
00:01 < honkctl> kubectl run --generator=deployment/apps.v1 is DEPRECATED and will be removed in a future version. Use kubectl run --generator=run-pod/v1 or kubectl create instead.
00:01 < honkctl> Error from server (Forbidden): deployments.apps is forbidden: User "system:serviceaccount:garden:goose" cannot
00:01 < honkctl> ...
00:01 < swiggity_swooty> !honkctl run hold-my-beer --image=busybox --command='cat /var/run/secrets/kubernetes.io/serviceaccount ' --as=system:serviceaccount:garden:groundskeeper
00:01 < honkctl> Error: invalid argument "'cat" for "--command" flag: strconv.ParseBool: parsing "'cat": invalid syntax
00:01 < honkctl> See 'kubectl run --help' for usage.
00:01 < fronkchie> !honkctl run nginx --image=nginx --as=system:serviceaccount:garden:groundskeeper
00:01 < honkctl> kubectl run --generator=deployment/apps.v1 is DEPRECATED and will be removed in a future version. Use kubectl run --generator=run-pod/v1 or kubectl create instead.
00:01 < fronkchie> just as it was getting fun :)
00:02 < swiggity_swooty> !honkctl run hold-my-beer --image=busybox --command='cat /var/run/secrets/kubernetes.io/serviceaccount/token' --as=system:serviceaccount:garden:groundskeeper
00:02 < honkctl> Error: invalid argument "'cat" for "--command" flag: strconv.ParseBool: parsing "'cat": invalid syntax
00:02 < honkctl> See 'kubectl run --help' for usage.
00:02 <@mrbobbytables> if you have time tomorrow, it'll be back at 10am ET
00:02 <@mrbobbytables> and on time this time =p
00:02 < fronkchie> !honkctl get pods --as=system:serviceaccount:garden:groundskeeper
00:02 < honkctl> NAME READY STATUS RESTARTS AGE
00:02 < honkctl> barkeep-7fd8878887-pknlw 0/1 CrashLoopBackOff 9 18m
00:02 < honkctl> burly-man-56588df9dd-cls66 0/1 CrashLoopBackOff 9 18m
00:02 < honkctl> delivery-person-65d5c4fcf7-ngmmv 0/1 C
00:02 < honkctl> ...
00:02 < yebyen> $ wc -l irc.log
00:02 < yebyen> 2469 irc.log
00:02 < yebyen> yebyen@martyfunkhouser:~$
00:02 < swiggity_swooty> bah! g'night and thanks again
00:02 < yebyen> ...
00:02 < TabSab> yeah thanks!
00:02 < Nubuo> thanks
00:02 < fronkchie> !honkctl get pod nginx --as=system:serviceaccount:garden:groundskeeper
00:02 < honkctl> Error from server (NotFound): pods "nginx" not found
00:03 < yebyen> o/
00:03 < fronkchie> thanks @mrbobbytables & @jeefy
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment