<p>keep getting this when trying to go to the web of a httpd pod, what permissions am i missing.</p>
<pre><code>{
  &quot;kind&quot;: &quot;Status&quot;,
  &quot;apiVersion&quot;: &quot;v1&quot;,
  &quot;metadata&quot;: {
    
  },
  &quot;status&quot;: &quot;Failure&quot;,
  &quot;message&quot;: &quot;pods \&quot;pod-httpd\&quot; is forbidden: User \&quot;system:anonymous\&quot; cannot get resource \&quot;pods\&quot; in API group \&quot;\&quot; in the namespace \&quot;default\&quot;&quot;,
  &quot;reason&quot;: &quot;Forbidden&quot;,
  &quot;details&quot;: {
    &quot;name&quot;: &quot;pod-httpd&quot;,
    &quot;kind&quot;: &quot;pods&quot;
  },
  &quot;code&quot;: 403
}
</code></pre>

Will
<p>The error is clear <code>User &quot;system:anonymous&quot;</code> means k8s recognising you as <code>anonymous</code> user and that is why it is giving forbidden reason for accessing the desired resources.<br />
So, when you do <code>curl https://&lt;ip&gt;:&lt;port&gt;/&lt;endpoint&gt;</code> you are using TLS for the communication. In this type of communication you need to provide your CA (certificate authority, who signed your certificate) certificate,  and your certificate and key to the curl like below, because in TLS server-client need to be verified.</p>
<pre><code>curl https://&lt;ip&gt;:&lt;port&gt;/&lt;endpoint&gt; --key &lt;your_key&gt; --cert &lt;your_cert&gt;  --cacert &lt;ca_cert&gt;
</code></pre>
<p>N.B: here <code>you</code> means the client</p>
