From 35717429a21bd2cc9f8c4a7729a58b4a0ad22f83 Mon Sep 17 00:00:00 2001
From: William Petit <wpetit@cadoles.com>
Date: Thu, 28 Mar 2024 09:10:16 +0100
Subject: [PATCH] doc(k8s): add in/out cluster api querying procedure

---
 misc/k8s/README.md | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/misc/k8s/README.md b/misc/k8s/README.md
index 75df3f7..82c7ff1 100644
--- a/misc/k8s/README.md
+++ b/misc/k8s/README.md
@@ -41,6 +41,8 @@ By default, with you host web browser, open http://localhost:9000, you should se
 
 ### Using the admin API
 
+#### From inside the cluster
+
 1. Open shell in bouncer-admin pod
 
    ```shell
@@ -59,6 +61,20 @@ By default, with you host web browser, open http://localhost:9000, you should se
    bouncer admin proxy query
    ```
 
+#### From outside the cluster
+
+1. Retrieve the authentication token from the generated secret
+
+   ```shell
+   TOKEN=$(kubectl get secret -n bouncer-dev -o jsonpath="{.data.token}" bouncer-admin-writer-token | base64 -d)
+   ```
+
+2. Use the `bouncer` admin client to query the admin API
+
+   ```shell
+   ./bouncer admin proxy query -t "${TOKEN}" --server http://127.0.0.1:9999
+   ```
+
 ## Benchmarking
 
 You can use [`siege`](https://github.com/JoeDog/siege) to benchmark your instance with the Cadoles proxy.