Daily dose of #k8s funny, when they added websocket support to the pods/exec API; It also made the GET verb valid. Meaning that most companies cluster-reader role also grants privileges to pods/exec, attach, etc.
Ive now seen 3 enterprise companies make this mistake.
github.com/kubernetes/k...
github.com
Request method of `kubectl exec` changed from `POST` to `GET` now? · Issue #133515 · kubernetes/kubernetes
What happened: Why has the request method of kubectl exec changed from POST to GET now, eg, v1.33.3. It was POST in v1.26.15? And now pods/exec no need create verbs, get is enough to make it happen...
