<p>According to the kubernetes documentation, those are the following verbs:</p>

<p><a href="https://kubernetes.io/docs/reference/access-authn-authz/authorization/#determine-the-request-verb" rel="nofollow noreferrer">https://kubernetes.io/docs/reference/access-authn-authz/authorization/#determine-the-request-verb</a>
<a href="https://i.stack.imgur.com/Ampbt.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/Ampbt.png" alt="enter image description here"></a></p>

<p>I've been looking at kubernetes-dashboard Role, and i saw this:</p>

<pre><code>  - apiGroups:
    - ""
    resourceNames:
    - heapster
    - dashboard-metrics-scraper
    resources:
    - services
    verbs:
    - proxy
</code></pre>

<p>This is the role of kubernetes-dashboard</p>

<p>I didn't see any indication that in the audits they use the "proxy" verb. Any clearance would be great</p>

ArielB
<p>When you perform <code>kubectl proxy</code> the request goes to API Server which calls <code>POST /api/v1/namespaces/{namespace}/services/{name}/proxy</code> the proxy api of services as documented <a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.17/#-strong-proxy-operations-service-v1-core-strong-" rel="nofollow noreferrer">here</a>.</p>

<p>Proxy is not a verb, it's a sub resource exposed by Kubelet.</p>
