k8s RBAC相关文档

1. xx
2. xx
3. xx
4. xx
5. xx
6. 创建secret token

# 替换以下三个字段值即可
apiVersion: v1
kind: Secret
metadata:
  name: xxx-token
  namespace: xxx
  annotations:
    kubernetes.io/service-account.name: xxx-serviceaccount
type: kubernetes.io/service-account-token

# 获取token：
    kubectl describe secret xxxx -n xxxx

7. 生成kube config文件

1. 获取集群配置
kubectl config view --flatten --minify

# 输出如下
apiVersion: v1
clusters:
- cluster:
    certificate-authority-data: xxxxxx
    server: https://172.16.250.74:6443
  name: kubernetes
contexts:
- context:
    cluster: kubernetes
    user: kubernetes-admin
  name: kubernetes-admin@kubernetes
current-context: kubernetes-admin@kubernetes
kind: Config
users:
- name: lzos2-workflow-test
  user:
    token: xxxxxx
    
2. 替换相关字段值：
    certificate-authority-data生成后无需修改；
    cluster.name与context.cluster一致;
    user.token获取token填入；
    context.user与user.name一致，为sa名；
    current-context不确定，个人填入与context.cluster一致

3. 测试：
     命令添加指定配置  --kubeconfig=