Skip to content

Kubernetes — Access levels

Your role in your team (set in the DevOps portal) decides what you can do in that team's namespaces.

Level Non-prod namespaces Prod namespaces
Viewer Read (no Secrets) Read (no Secrets)
Developer Read, port-forward, restart pods, exec, write like Flux Read, port-forward, restart (delete pod) only: no Secrets, no exec
Owner All of the above All of the above
  • Your changes go through the same policy checks as Flux.
  • Prod Secrets aren't readable by developers — use the secrets tooling instead.