KUBERNETES-1-13-认证及Serviceaccount

最新推荐文章于 2022-04-27 10:55:39 发布

原创

最新推荐文章于 2022-04-27 10:55:39 发布 · 1.5w 阅读

0 ·

CC 4.0 BY-SA版权

文章标签：

#kubernetes #k8s #Serviceaccount #certificate #config

本文档详细介绍了如何在Kubernetes中查看和管理Serviceaccount、证书以及配置文件。通过`kubectl`命令行工具，展示了查看API版本、用户认证信息、监听端口、名称空间、部署资源等操作，并演示了生成私钥、认证请求、公钥的过程。此外，还涉及到上下文设置、用户权限管理以及集群认证配置。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

1.kubectl api-versions查看kubectl的用户组。cat .kube/config查看配置信息，client-certificate-data可以看到用户的认证信息，client-key-data用户的密钥信息。

[root@master ~]# kubectl api-versions
admissionregistration.k8s.io/v1beta1
apiextensions.k8s.io/v1beta1
apiregistration.k8s.io/v1
apiregistration.k8s.io/v1beta1
apps/v1
apps/v1beta1
apps/v1beta2
authentication.k8s.io/v1
authentication.k8s.io/v1beta1
authorization.k8s.io/v1
authorization.k8s.io/v1beta1
autoscaling/v1
autoscaling/v2beta1
batch/v1
batch/v1beta1
certificates.k8s.io/v1beta1
events.k8s.io/v1beta1
extensions/v1beta1
networking.k8s.io/v1
policy/v1beta1
rbac.authorization.k8s.io/v1
rbac.authorization.k8s.io/v1beta1
scheduling.k8s.io/v1beta1
storage.k8s.io/v1
storage.k8s.io/v1beta1
v1
[root@master ~]# cat .kube/config
apiVersion: v1
clusters:
- cluster:
certificate-authority-data: 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
server: https://172.20.0.128:6443
name: kubernetes
contexts:
- context:
cluster: kubernetes
user: kubernetes-admin
name: kubernetes-admin@kubernetes
current-context: kubernetes-admin@kubernetes
kind: Config
preferences: {}
users:
- name: kubernetes-admin
user:
client-certificate-data: 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
client-key-data: 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