teleport/examples/k8s-auth
Tiago Silva 76d6dc8215
Fix 'get-kubeconfig.sh' to work with Kubernetes v1.24+ (#15612)
Kubernetes v1.24 enabled, by default, the LegacyServiceAccountTokenNoAutoGeneration feature.
This feature prevents Secrets containing service account tokens from being automatically created for every ServiceAccount.
Instead, when enabled, it requires a manual action for creating the Secret bound to the SA.

Fixes #15611
2022-08-17 19:48:28 +01:00
..
.gitignore k8s: add merge-kubeconfigs.sh script (#5677) 2021-04-29 11:05:20 -07:00
get-kubeconfig.sh Fix 'get-kubeconfig.sh' to work with Kubernetes v1.24+ (#15612) 2022-08-17 19:48:28 +01:00
merge-kubeconfigs.sh k8s: add merge-kubeconfigs.sh script (#5677) 2021-04-29 11:05:20 -07:00
README.md k8s: add merge-kubeconfigs.sh script (#5677) 2021-04-29 11:05:20 -07:00

kubeconfig creation tools

This directory contains tools for creating kubeconfig files for use in Teleport.

get-kubeconfig.sh

get-kubeconfig.sh creates a kubeconfig file for a single cluster. The resulting kubeconfig uses long-lived service account credentials independent of any provider-specific authentication mechanisms.

This script uses kubectl to get the credentials for the new kubeconfig. Run kubectl config get-contexts before using this script to make sure you're targeting the correct cluster.

merge-kubeconfigs.sh

merge-kubeconfigs.sh takes a list of kubeconfig paths and merges them into one file named merged-kubeconfig.