Execute command on one pod from another

[BrianH_IE]

Hi All,

Hypothetically, is it possible to execute a command on one container from another (in same namespace)?

I'm thinking the container should use the "exec" k8s API, like a POST to:

/api/v1/namespaces/$NAMESPACE/pods/$NAME/exec

But I wouldn't want to give the keys to the kingdom to any one pod, can I set up RBAC in such a way that I'd limit access to just the single target pod, and allow the initiating pod to have the token it requires to make that request?

Thanks,

Brian

[tat]

Without having actually tried it myself:

create a rbac role for that api resource
see: https://docs.openshift.com/container-platform/4.8/authentication/using-rbac.html
create a service account
create a rolebinding
link that service account to the deployment/pod
access the api resource

let me know if this worked