1、原理图
![](https://img-blog.csdnimg.cn/81545f6dd6b34f1a88466535cc003166.png)
2、操作方法
A、节点配置
[root@master /] kubectl create clusterrolebinding permissive-bingding --clusterrole=cluster-admin --group=system:serviceaccounts
B、容器操作
root@curl:/# export CURL_CA_BUNDLE=/var/run/secrets/kubernetes.io/serviceaccount/ca.crt
root@curl:/# export TOKEN=$(cat /var/run/secrets/kubernetes.io/serviceaccount/token)
root@curl:/# export NS=$(cat /var/run/secrets/kubernetes.io/serviceaccount/namespace)
root@curl:/# curl -H "Authorization: Bearer $TOKEN" https://kubernetes
root@curl:/# curl -H "Authorization: Bearer $TOKEN" https://kubernetes/api/v1/namespaces/$NS/pods