Kubernetes Authentication

From wikieduonline
Jump to navigation Jump to search



  • Service accounts are users managed by the Kubernetes API. They are bound to specific namespaces, and created automatically by the API server or manually through API calls. Service accounts are tied to a set of credentials stored as Secrets, which are mounted into pods allowing in-cluster processes to talk to the Kubernetes API.
  • Users: "normal" user accounts cannot be added via an API call, any user that presents a valid certificate signed by the cluster's certificate authority (CA) is considered authenticated.[1]. Kubernetes determines the username from the common name field in the 'subject' of the cert (e.g., "/CN=your-user").

Authentication options[edit]

Authorization: Bearer 31ada4fd-adec-460c-809a-9e56ceb75269



See also[edit]

  • https://kubernetes.io/docs/reference/access-authn-authz/authentication/#users-in-kubernetes
  • Advertising: