secret isn't blocked for non-admin user but secrets is about relay HOT 3 CLOSED

@estein9825 Are you getting any error for kubectl get secrets? If yes, please paste it here.

from relay.

Yes, get secrets (with an s) is blocked with an unauthorized error as desired.

from relay.

so with paralus, any user with read only permission is not allowed to view secrets.

In this case kubectl get secrets works fine however read only user is able to view secret using kubectl get secret <name> thus causing an escalation privilege or unauthorised access to a resource which ideally should be blocked for read only users.

from relay.