Editing Kubernetes Authentication

Jump to navigation Jump to search

Warning: You are not logged in. Your IP address will be publicly visible if you make any edits. If you log in or create an account, your edits will be attributed to your username, along with other benefits.

The edit can be undone. Please check the comparison below to verify that this is what you want to do, and then save the changes below to finish undoing the edit.

Latest revision Your text
Line 1: Line 1:
 
https://kubernetes.io/docs/reference/access-authn-authz/authentication/
 
https://kubernetes.io/docs/reference/access-authn-authz/authentication/
 
== Accounts ==
 
* [[Service accounts]] are users managed by the Kubernetes API. They are bound to specific [[namespaces]], and created automatically by the API server or manually through API calls. Service accounts are tied to a set of credentials stored as [[Secrets]], which are mounted into pods allowing in-cluster processes to talk to the Kubernetes API.
 
* [[Users]]: "normal" user accounts cannot be added via an API call, any user that presents a valid [[certificate]] signed by the cluster's [[certificate authority]] (CA) is considered authenticated.<ref>https://kubernetes.io/docs/reference/access-authn-authz/authentication/#users-in-kubernetes</ref>. Kubernetes determines the username from the common name field in the <code>'subject'</code> of the cert (e.g., <code>"/CN=your-user"</code>).
 
 
== Authentication options ==
 
* Certificates
 
* [[Bearer tokens]]
 
* [[Authenticating proxy]]
 
  
  
Line 17: Line 8:
 
* <code>[[kubectl config set-credentials]]</code>
 
* <code>[[kubectl config set-credentials]]</code>
  
== Activities ==
 
* [[Access Kubernetes REST API using default token]]
 
  
 
== Related ==
 
== Related ==
 
* <code>[[kubectl create serviceaccount]]</code>
 
* <code>[[kubectl create serviceaccount]]</code>
* [[aws-auth]]: <code>[[kubectl edit configmap aws-auth]]</code>
+
* <code>[[kubectl edit configmap aws-auth]]</code>
* <code>[[gke-gcloud-auth-plugin]]</code>
 
* <code>[[kind: CertificateSigningRequest]]</code>
 
* [[Kubernetes Authorization]]
 
* [[EKS Authentication]]
 
* [[kubectl create token]]
 
  
 
== See also ==
 
== See also ==
 +
* {{kubectl config}}
 +
* {{Kubernetes service account}}
 
* {{Kubernetes Authentication}}
 
* {{Kubernetes Authentication}}
  
 
[[Category:K8s]]
 
[[Category:K8s]]

Please note that all contributions to wikieduonline may be edited, altered, or removed by other contributors. If you do not want your writing to be edited mercilessly, then do not submit it here.
You are also promising us that you wrote this yourself, or copied it from a public domain or similar free resource (see Wikieduonline:Copyrights for details). Do not submit copyrighted work without permission!

Cancel Editing help (opens in new window)

Template used on this page:

Advertising: