#!/bin/bash
DENIED="delete apply patch edit exec scale rollout drain cordon uncordon taint replace create annotate label"
if [ "$#" -eq 0 ]; then exec /opt/kube/kubectl "$@"; fi
SUBCMD="$1"
for d in $DENIED; do
  if [ "$SUBCMD" = "$d" ]; then
    echo "ERROR: \"$SUBCMD\" no permitido en modo solo lectura." >&2; exit 1
  fi
done
exec /opt/kube/kubectl "$@"