KUBERNETES-1-13-认证及Serviceaccount

最新推荐文章于 2024-09-15 18:27:41 发布

ligan1115

最新推荐文章于 2024-09-15 18:27:41 发布

阅读量1.4w

点赞数

分类专栏： KUBERNETES 文章标签： kubernetes k8s Serviceaccount certificate config

本文链接：https://blog.csdn.net/ligan1115/article/details/85051023

版权

本文档详细介绍了如何在Kubernetes中查看和管理Serviceaccount、证书以及配置文件。通过`kubectl`命令行工具，展示了查看API版本、用户认证信息、监听端口、名称空间、部署资源等操作，并演示了生成私钥、认证请求、公钥的过程。此外，还涉及到上下文设置、用户权限管理以及集群认证配置。

摘要由CSDN通过智能技术生成

1.kubectl api-versions查看kubectl的用户组。cat .kube/config查看配置信息，client-certificate-data可以看到用户的认证信息，client-key-data用户的密钥信息。

[root@master ~]# kubectl api-versions
admissionregistration.k8s.io/v1beta1
apiextensions.k8s.io/v1beta1
apiregistration.k8s.io/v1
apiregistration.k8s.io/v1beta1
apps/v1
apps/v1beta1
apps/v1beta2
authentication.k8s.io/v1
authentication.k8s.io/v1beta1
authorization.k8s.io/v1
authorization.k8s.io/v1beta1
autoscaling/v1
autoscaling/v2beta1
batch/v1
batch/v1beta1
certificates.k8s.io/v1beta1
events.k8s.io/v1beta1
extensions/v1beta1
networking.k8s.io/v1
policy/v1beta1
rbac.authorization.k8s.io/v1
rbac.authorization.k8s.io/v1beta1
scheduling.k8s.io/v1beta1
storage.k8s.io/v1
storage.k8s.io/v1beta1
v1
[root@master ~]# cat .kube/config
apiVersion: v1
clusters:
- cluster:
certificate-authority-data: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN5RENDQWJDZ0F3SUJBZ0lCQURBTkJna3Foa2lHOXcwQkFRc0ZBREFWTVJNd0VRWURWUVFERXdwcmRXSmwKY201bGRHVnpNQjRYRFRFNE1USXhNekUwTURRME5Gb1hEVEk0TVRJeE1ERTBNRFEwTkZvd0ZURVRNQkVHQTFVRQpBeE1LYTNWaVpYSnVaWFJsY3pDQ0FTSXdEUVlKS29aSWh2Y05BUUVCQlFBRGdnRVBBRENDQVFvQ2dnRUJBTXk2CjVTNTI5TWQwS0Jub3NVeGZaT2M1aWFEbHk0MDIzcjB3bjVwRnRlQlBvc2k0MktCejM1eWhjT3pLTm9CT3JWVkIKd2RvMFc3WUYrVXl3VWpyNGxlRFhiS25TWGxzSGdkQWE5cyt0NWVqSGFubW8vbFVPSkc2em1wa0wyN0NEdUpraQpOK3lVbjlrUUNKSDJ5ejlqM20wSExoenFtbGsxbmlzZ0JDSllPTzA4bDJXVm9Dc1huL2F0SGdtc0kxNmVodC9BCm0xTkNyYWVoei9wOXdEY21oTWxiMm43WitXaUwzQ3BrVTZtd29PdU9XS0ZVMzJ1d3ZsY3NCWDVwUEtLWDVOV3YKT29oY05udzJyUjVqTHdjTHIwSUkvYWpOTWd3MWptT0hnVnQ5TVZpN3R0dzJjZHRUZUwzbkRSWVlqMVE0NHBuWQpjUytIWXM0bFFDV0NvNmk0Y3VNQ0F3RUFBYU1qTUNFd0RnWURWUjBQQVFIL0JBUURBZ0trTUE4R0ExVWRFd0VCCi93UUZNQU1CQWY4d0RRWUpLb1pJaHZjTkFRRUxCUUFEZ2dFQkFHMkZoSkZ4VDlrTkJodXB2ME9VZ3prMlhEaHMKU0o1bSs4M0NHWnplRnBZMHFNd3BCa3hXMUw3RklJczZjR2pFQlNrdGVXR2d6YmM0TFFaRm9oWHNReTNacUFMYwpvVDlDQ3ArK2FPZHRqeVdoL1lFK1pBRGFTNTA3SVRzcmt4WUt2NXd0SGV1a0pUUnYxdS8rdm5MZ0tGaldCUXErCncxZHhYUGZjdDZjejNobWV3ME5Xd2gva21hSUJ0aUwzdXFuVmZyZG1QN0ZOd0ZSd2ZkYlNmTGhxUzh2aStsdDUKV3RHOEE2VjdjeG9SaGJJL0NHb3VWMWUyaGp2TnZUYWdldlVFUkJXTlVRTjRKeG9Gby8xcjJBY0lMZmtBR2k5OAo3di94WWhWaGcwcG5XRWIrcGlaSTRHV3hKd29PbjY2UUxQVnZEZVRUcitlSzIwcXdMekVTd1oyUmtaST0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo=
server: https://172.20.0.128:6443
name: kubernetes
contexts:
- context:
cluster: kubernetes
user: kubernetes-admin
name: kubernetes-admin@kubernetes
current-context: kubernetes-admin@kubernetes
kind: Config
preferences: {}
users:
- name: kubernetes-admin
user:
client-certificate-data: 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
client-key-data: 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