1OC SERVICEACCOUNTS(1)              June 2016             OC SERVICEACCOUNTS(1)
2
3
4

NAME

6       oc serviceaccounts create-kubeconfig - Generate a kubeconfig file for a
7       service account
8
9
10

SYNOPSIS

12       oc serviceaccounts create-kubeconfig [OPTIONS]
13
14
15

DESCRIPTION

17       Generate a kubeconfig file that will utilize this service account.
18
19
20       The kubeconfig file will reference the service account  token  and  use
21       the current server, namespace, and cluster contact info. If the service
22       account has multiple tokens, the first token found  will  be  returned.
23       The generated file will be output to STDOUT.
24
25
26       Service account API tokens are used by service accounts to authenticate
27       to the API. Client actions using a service account token will  be  exe‐
28       cuted as if the service account itself were making the actions.
29
30
31

OPTIONS

33       --with-namespace=""
34           Namespace for this context in .kubeconfig.
35
36
37

OPTIONS INHERITED FROM PARENT COMMANDS

39       --allow_verification_with_non_compliant_keys=false
40           Allow  a  SignatureVerifier  to  use  keys  which  are  technically
41       non-compliant with RFC6962.
42
43
44       --alsologtostderr=false
45           log to standard error as well as files
46
47
48       --application_metrics_count_limit=100
49           Max number of application metrics to store (per container)
50
51
52       --as=""
53           Username to impersonate for the operation
54
55
56       --as-group=[]
57           Group to impersonate for the operation, this flag can  be  repeated
58       to specify multiple groups.
59
60
61       --azure-container-registry-config=""
62           Path  to the file containing Azure container registry configuration
63       information.
64
65
66       --boot_id_file="/proc/sys/kernel/random/boot_id"
67           Comma-separated list of files to check for boot-id. Use  the  first
68       one that exists.
69
70
71       --cache-dir="/builddir/.kube/http-cache"
72           Default HTTP cache directory
73
74
75       --certificate-authority=""
76           Path to a cert file for the certificate authority
77
78
79       --client-certificate=""
80           Path to a client certificate file for TLS
81
82
83       --client-key=""
84           Path to a client key file for TLS
85
86
87       --cloud-provider-gce-lb-src-cidrs=130.211.0.0/22,209.85.152.0/22,209.85.204.0/22,35.191.0.0/16
88           CIDRs opened in GCE firewall for LB traffic proxy  health checks
89
90
91       --cluster=""
92           The name of the kubeconfig cluster to use
93
94
95       --container_hints="/etc/cadvisor/container_hints.json"
96           location of the container hints file
97
98
99       --containerd="unix:///var/run/containerd.sock"
100           containerd endpoint
101
102
103       --context=""
104           The name of the kubeconfig context to use
105
106
107       --default-not-ready-toleration-seconds=300
108           Indicates   the   tolerationSeconds   of   the    toleration    for
109       notReady:NoExecute  that is added by default to every pod that does not
110       already have such a toleration.
111
112
113       --default-unreachable-toleration-seconds=300
114           Indicates the tolerationSeconds  of  the  toleration  for  unreach‐
115       able:NoExecute  that  is  added  by  default to every pod that does not
116       already have such a toleration.
117
118
119       --docker="unix:///var/run/docker.sock"
120           docker endpoint
121
122
123       --docker-tls=false
124           use TLS to connect to docker
125
126
127       --docker-tls-ca="ca.pem"
128           path to trusted CA
129
130
131       --docker-tls-cert="cert.pem"
132           path to client certificate
133
134
135       --docker-tls-key="key.pem"
136           path to private key
137
138
139       --docker_env_metadata_whitelist=""
140           a comma-separated list of environment variable keys that  needs  to
141       be collected for docker containers
142
143
144       --docker_only=false
145           Only report docker containers in addition to root stats
146
147
148       --docker_root="/var/lib/docker"
149           DEPRECATED:  docker  root is read from docker info (this is a fall‐
150       back, default: /var/lib/docker)
151
152
153       --enable_load_reader=false
154           Whether to enable cpu load reader
155
156
157       --event_storage_age_limit="default=24h"
158           Max length of time for which to store events (per type). Value is a
159       comma  separated  list  of  key  values, where the keys are event types
160       (e.g.: creation, oom) or "default" and the value is a duration. Default
161       is applied to all non-specified event types
162
163
164       --event_storage_event_limit="default=100000"
165           Max  number  of  events to store (per type). Value is a comma sepa‐
166       rated list of key values, where the keys are event  types  (e.g.:  cre‐
167       ation,  oom)  or  "default"  and  the  value  is an integer. Default is
168       applied to all non-specified event types
169
170
171       --global_housekeeping_interval=0
172           Interval between global housekeepings
173
174
175       --housekeeping_interval=0
176           Interval between container housekeepings
177
178
179       --insecure-skip-tls-verify=false
180           If true, the server's certificate will not be checked for validity.
181       This will make your HTTPS connections insecure
182
183
184       --kubeconfig=""
185           Path to the kubeconfig file to use for CLI requests.
186
187
188       --log-flush-frequency=0
189           Maximum number of seconds between log flushes
190
191
192       --log_backtrace_at=:0
193           when logging hits line file:N, emit a stack trace
194
195
196       --log_cadvisor_usage=false
197           Whether to log the usage of the cAdvisor container
198
199
200       --log_dir=""
201           If non-empty, write log files in this directory
202
203
204       --logtostderr=true
205           log to standard error instead of files
206
207
208       --machine_id_file="/etc/machine-id,/var/lib/dbus/machine-id"
209           Comma-separated  list  of  files  to  check for machine-id. Use the
210       first one that exists.
211
212
213       --match-server-version=false
214           Require server version to match client version
215
216
217       -n, --namespace=""
218           If present, the namespace scope for this CLI request
219
220
221       --request-timeout="0"
222           The length of time to wait before giving  up  on  a  single  server
223       request. Non-zero values should contain a corresponding time unit (e.g.
224       1s, 2m, 3h). A value of zero means don't timeout requests.
225
226
227       -s, --server=""
228           The address and port of the Kubernetes API server
229
230
231       --stderrthreshold=2
232           logs at or above this threshold go to stderr
233
234
235       --storage_driver_buffer_duration=0
236           Writes in the storage driver will be buffered  for  this  duration,
237       and committed to the non memory backends as a single transaction
238
239
240       --storage_driver_db="cadvisor"
241           database name
242
243
244       --storage_driver_host="localhost:8086"
245           database host:port
246
247
248       --storage_driver_password="root"
249           database password
250
251
252       --storage_driver_secure=false
253           use secure connection with database
254
255
256       --storage_driver_table="stats"
257           table name
258
259
260       --storage_driver_user="root"
261           database username
262
263
264       --token=""
265           Bearer token for authentication to the API server
266
267
268       --user=""
269           The name of the kubeconfig user to use
270
271
272       -v, --v=0
273           log level for V logs
274
275
276       --version=false
277           Print version information and quit
278
279
280       --vmodule=
281           comma-separated  list  of pattern=N settings for file-filtered log‐
282       ging
283
284
285

EXAMPLE

287                # Create a kubeconfig file for service account 'default'
288                oc serviceaccounts create-kubeconfig 'default' > default.kubeconfig
289
290
291
292

SEE ALSO

294       oc-serviceaccounts(1),
295
296
297

HISTORY

299       June 2016, Ported from the Kubernetes man-doc generator
300
301
302
303Openshift                  Openshift CLI User Manuals    OC SERVICEACCOUNTS(1)
Impressum