K8s
helm¶
index.yaml¶
k8s¶
新加权限¶
https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/ https://kubernetes.io/zh/docs/reference/access-authn-authz/rbac/#kubectl-auth-reconcile https://kubernetes.io/zh/docs/reference/access-authn-authz/rbac/#kubectl-create-role https://kubernetes.io/zh/docs/reference/access-authn-authz/rbac/#kubectl-create-clusterrolebinding
使用serviceaccount的token链接集群¶
SECRET_TOKEN=$(kubectl get sa {K8SUSERNAME} -o jsonpath='{.secrets[0].name}') export SA_TOKEN=(kubectl get secret ${SECRET_TOKEN} -o jsonpath={.data.token} -n sa-test | base64 -d)
SA_TOKEN=$(kubectl get secret ${SECRET_TOKEN} -o jsonpath={.data.token} -n default | base64 -d)
kubectl config set-credentials {K8SUSERNAME} --token={SA_TOKEN}
kubectl config set-context {K8SUSERNAME} --cluster=cls-4pp6s10w--namespace=default --user={K8SUSERNAME}
kubectl rolling-update myapp --image=us.gcr.io/project-107012/myapp:5c3dda6b
kubectl set image -n dev deployment
本页面的全部内容在 CC BY-NC-SA 4.0 协议之条款下提供，附加条款亦可能应用。