1OC SERVICEACCOUNTS(1)              June 2016             OC SERVICEACCOUNTS(1)
2
3
4

NAME

6       oc serviceaccounts create-kubeconfig - Generate a kubeconfig file for a
7       service account
8
9
10

SYNOPSIS

12       oc serviceaccounts create-kubeconfig [OPTIONS]
13
14
15

DESCRIPTION

17       Generate a kubeconfig file that will utilize this service account.
18
19
20       The kubeconfig file will reference the service account  token  and  use
21       the current server, namespace, and cluster contact info. If the service
22       account has multiple tokens, the first token found  will  be  returned.
23       The generated file will be output to STDOUT.
24
25
26       Service account API tokens are used by service accounts to authenticate
27       to the API. Client actions using a service account token will  be  exe‐
28       cuted as if the service account itself were making the actions.
29
30
31

OPTIONS

33       --with-namespace=""
34           Namespace for this context in .kubeconfig.
35
36
37

OPTIONS INHERITED FROM PARENT COMMANDS

39       --allow_verification_with_non_compliant_keys=false
40           Allow  a  SignatureVerifier  to  use  keys  which  are  technically
41       non-compliant with RFC6962.
42
43
44       --alsologtostderr=false
45           log to standard error as well as files
46
47
48       --application_metrics_count_limit=100
49           Max number of application metrics to store (per container)
50
51
52       --as=""
53           Username to impersonate for the operation
54
55
56       --as-group=[]
57           Group to impersonate for the operation, this flag can  be  repeated
58       to specify multiple groups.
59
60
61       --azure-container-registry-config=""
62           Path  to the file containing Azure container registry configuration
63       information.
64
65
66       --boot_id_file="/proc/sys/kernel/random/boot_id"
67           Comma-separated list of files to check for boot-id. Use  the  first
68       one that exists.
69
70
71       --cache-dir="/builddir/.kube/http-cache"
72           Default HTTP cache directory
73
74
75       --certificate-authority=""
76           Path to a cert file for the certificate authority
77
78
79       --client-certificate=""
80           Path to a client certificate file for TLS
81
82
83       --client-key=""
84           Path to a client key file for TLS
85
86
87       --cloud-provider-gce-lb-src-cidrs=130.211.0.0/22,209.85.152.0/22,209.85.204.0/22,35.191.0.0/16
88           CIDRs opened in GCE firewall for LB traffic proxy  health checks
89
90
91       --cluster=""
92           The name of the kubeconfig cluster to use
93
94
95       --container_hints="/etc/cadvisor/container_hints.json"
96           location of the container hints file
97
98
99       --containerd="unix:///var/run/containerd.sock"
100           containerd endpoint
101
102
103       --context=""
104           The name of the kubeconfig context to use
105
106
107       --default-not-ready-toleration-seconds=300
108           Indicates   the   tolerationSeconds   of   the    toleration    for
109       notReady:NoExecute  that is added by default to every pod that does not
110       already have such a toleration.
111
112
113       --default-unreachable-toleration-seconds=300
114           Indicates the tolerationSeconds  of  the  toleration  for  unreach‐
115       able:NoExecute  that  is  added  by  default to every pod that does not
116       already have such a toleration.
117
118
119       --docker="unix:///var/run/docker.sock"
120           docker endpoint
121
122
123       --docker-tls=false
124           use TLS to connect to docker
125
126
127       --docker-tls-ca="ca.pem"
128           path to trusted CA
129
130
131       --docker-tls-cert="cert.pem"
132           path to client certificate
133
134
135       --docker-tls-key="key.pem"
136           path to private key
137
138
139       --docker_env_metadata_whitelist=""
140           a comma-separated list of environment variable keys that  needs  to
141       be collected for docker containers
142
143
144       --docker_only=false
145           Only report docker containers in addition to root stats
146
147
148       --docker_root="/var/lib/docker"
149           DEPRECATED:  docker  root is read from docker info (this is a fall‐
150       back, default: /var/lib/docker)
151
152
153       --enable_load_reader=false
154           Whether to enable cpu load reader
155
156
157       --event_storage_age_limit="default=24h"
158           Max length of time for which to store events (per type). Value is a
159       comma  separated  list  of  key  values, where the keys are event types
160       (e.g.: creation, oom) or "default" and the value is a duration. Default
161       is applied to all non-specified event types
162
163
164       --event_storage_event_limit="default=100000"
165           Max  number  of  events to store (per type). Value is a comma sepa‐
166       rated list of key values, where the keys are event  types  (e.g.:  cre‐
167       ation,  oom)  or  "default"  and  the  value  is an integer. Default is
168       applied to all non-specified event types
169
170
171       --global_housekeeping_interval=0
172           Interval between global housekeepings
173
174
175       --housekeeping_interval=0
176           Interval between container housekeepings
177
178
179       --httptest.serve=""
180           if non-empty, httptest.NewServer serves on this address and blocks
181
182
183       --insecure-skip-tls-verify=false
184           If true, the server's certificate will not be checked for validity.
185       This will make your HTTPS connections insecure
186
187
188       --kubeconfig=""
189           Path to the kubeconfig file to use for CLI requests.
190
191
192       --log-flush-frequency=0
193           Maximum number of seconds between log flushes
194
195
196       --log_backtrace_at=:0
197           when logging hits line file:N, emit a stack trace
198
199
200       --log_cadvisor_usage=false
201           Whether to log the usage of the cAdvisor container
202
203
204       --log_dir=""
205           If non-empty, write log files in this directory
206
207
208       --logtostderr=true
209           log to standard error instead of files
210
211
212       --machine_id_file="/etc/machine-id,/var/lib/dbus/machine-id"
213           Comma-separated  list  of  files  to  check for machine-id. Use the
214       first one that exists.
215
216
217       --match-server-version=false
218           Require server version to match client version
219
220
221       -n, --namespace=""
222           If present, the namespace scope for this CLI request
223
224
225       --request-timeout="0"
226           The length of time to wait before giving  up  on  a  single  server
227       request. Non-zero values should contain a corresponding time unit (e.g.
228       1s, 2m, 3h). A value of zero means don't timeout requests.
229
230
231       -s, --server=""
232           The address and port of the Kubernetes API server
233
234
235       --stderrthreshold=2
236           logs at or above this threshold go to stderr
237
238
239       --storage_driver_buffer_duration=0
240           Writes in the storage driver will be buffered  for  this  duration,
241       and committed to the non memory backends as a single transaction
242
243
244       --storage_driver_db="cadvisor"
245           database name
246
247
248       --storage_driver_host="localhost:8086"
249           database host:port
250
251
252       --storage_driver_password="root"
253           database password
254
255
256       --storage_driver_secure=false
257           use secure connection with database
258
259
260       --storage_driver_table="stats"
261           table name
262
263
264       --storage_driver_user="root"
265           database username
266
267
268       --token=""
269           Bearer token for authentication to the API server
270
271
272       --user=""
273           The name of the kubeconfig user to use
274
275
276       -v, --v=0
277           log level for V logs
278
279
280       --version=false
281           Print version information and quit
282
283
284       --vmodule=
285           comma-separated  list  of pattern=N settings for file-filtered log‐
286       ging
287
288
289

EXAMPLE

291                # Create a kubeconfig file for service account 'default'
292                oc serviceaccounts create-kubeconfig 'default' > default.kubeconfig
293
294
295
296

SEE ALSO

298       oc-serviceaccounts(1),
299
300
301

HISTORY

303       June 2016, Ported from the Kubernetes man-doc generator
304
305
306
307Openshift                  Openshift CLI User Manuals    OC SERVICEACCOUNTS(1)
Impressum