使用ServiceAccount Token的方式访问集群

erviceaccount的权限由集群中对应的rolebinding决定，官方文档               https://kubernetes.io/docs/reference/access-authn-authz/rbac/

  请选择对应权限的ServiceAccount来获取token，我这边选择的是admin ServiceAccount

1、获取ServiceAccount

kubectl get sa admin -n kube-system -o yaml
apiVersion: v1
kind: ServiceAccount
metadata:
  annotations:
    kubectl.kubernetes.io/last-applied-configuration: |
      {"apiVersion":"v1","kind":"ServiceAccount","metadata":{"annotations":{},"name":"admin","namespace":"kube-system"}}
  creationTimestamp: 2018-11-05T09:23:39Z
  name: admin
  namespace: kube-system
  resourceVersion: "889"
  selfLink: /api/v1/namespaces/kube-system/serviceaccounts/admin
  uid: 7af4f177-e0dc-11e8-8ef4-00163e009