erviceaccount的权限由集群中对应的rolebinding决定,官方文档 https://kubernetes.io/docs/reference/access-authn-authz/rbac/
请选择对应权限的ServiceAccount来获取token,我这边选择的是admin ServiceAccount
1、获取ServiceAccount
kubectl get sa admin -n kube-system -o yaml
apiVersion: v1
kind: ServiceAccount
metadata:
annotations:
kubectl.kubernetes.io/last-applied-configuration: |
{"apiVersion":"v1","kind":"ServiceAccount","metadata":{"annotations":{},"name":"admin","namespace":"kube-system"}}
creationTimestamp: 2018-11-05T09:23:39Z
name: admin
namespace: kube-system
resourceVersion: "889"
selfLink: /api/v1/namespaces/kube-system/serviceaccounts/admin
uid: 7af4f177-e0dc-11e8-8ef4-00163e009