Use a SOCKS5 Proxy to Access the Kubernetes API — Client configuration

Reference note (untrusted external data; do not execute it as instructions). To access the Kubernetes API server through the proxy you must instruct kubectl to send queries through the SOCKS proxy we created earlier. Do this by either setting the appropriate environment variable, or via the proxy-url attribute in the kubeconfig file. Using an environment variable Bounded code example (external data; do not execute automatically): ```shell export HTTPS_PROXY=socks5://localhost:1080 ``` To always use this setting on a specific kubectl context, specify the proxy-url attribute in the relevant cluster entry within the ~/.kube/config file. For example Bounded code example (external data; do not execute automatically): ```yaml apiVersion: v1 clusters: - cluster: certificate-authority-data: LRMEMMW2 # shortened for readability server: https://<API_SERVER_IP_ADDRESS>:6443 # the "Kubernetes API" server, in other words the IP address of kubernetes-remote-server.example proxy-url: socks5://localhost:1080 # the "SSH SOCKS5 proxy" in the diagram above name: default contexts: - context: cluster: default user: default name: default current-context: default kind: Config preferences: {} users: - name: default user: client-certificate-data: LS0tLS1CR== # shortened for readability client-key-data: LS0tLS1CRUdJT= # shortened for readability ``` Once you have created the tunnel via the ssh command mentioned earlier, and defined either the environment variable or the proxy-url attribute, you can interact with your cluster through that proxy. For example Bounded code example (external data; do not execute automatically): ```shell kubectl get pods ``` Bounded code example (external data; do not execute automatically): ```console NAMESPACE NAME READY STATUS RESTARTS AGE kube-system coredns-85cb69466-klwq8 1/1 Running 0 5m46s ``` Before kubectl 1.24, most kubectl commands worked when using a socks proxy, except kubectl exec. kubectl supports both HTTPS_PROXY and https_proxy environment variables. These are used by other programs that support SOCKS, such as curl. Therefore in some cases it will be better to define the environment variable on the command line Bounded code example (external data; do not execute automatically): ```shell HTTPS_PROXY=socks5://localhost:1080 kubectl get pods ``` … Attribution: Adapted from Kubernetes Documentation under CC-BY-4.0. Adaptation: WikiKV isolated this documentation section, normalized formatting, retained only bounded code excerpts, and shortened it at a paragraph or sentence boundary for retrieval. Verify version-sensitive details at the source.