kubectl-create-token(1)

1KUBERNETES(1)(kubernetes)                            KUBERNETES(1)(kubernetes)
2
3
4
5Eric Paris Jan 2015
6
7

NAME

9       kubectl create token - Request a service account token
10
11
12

SYNOPSIS

14       kubectl create token [OPTIONS]
15
16
17

DESCRIPTION

19       Request a service account token.
20
21
22

OPTIONS

24       --allow-missing-template-keys=true       If  true, ignore any errors in
25       templates when a field or map key is missing in the template. Only  ap‐
26       plies to golang and jsonpath output formats.
27
28
29       --audience=[]       Audience of the requested token. If unset, defaults
30       to requesting a token for use with the Kubernetes API  server.  May  be
31       repeated to request a token valid for multiple audiences.
32
33
34       --bound-object-kind=""       Kind  of  an  object to bind the token to.
35       Supported kinds are Pod, Secret. If set,  --bound-object-name  must  be
36       provided.
37
38
39       --bound-object-name=""      Name of an object to bind the token to. The
40       token will expire when the object is deleted. Requires  --bound-object-
41       kind.
42
43
44       --bound-object-uid=""       UID  of an object to bind the token to. Re‐
45       quires --bound-object-kind and --bound-object-name. If unset,  the  UID
46       of the existing object is used.
47
48
49       --duration=0s       Requested  lifetime of the issued token. The server
50       may return a token with a longer or shorter lifetime.
51
52
53       -o, --output=""      Output format. One of: (json, yaml, name,  go-tem‐
54       plate, go-template-file, template, templatefile, jsonpath, jsonpath-as-
55       json, jsonpath-file).
56
57
58       --show-managed-fields=false      If true, keep the  managedFields  when
59       printing objects in JSON or YAML format.
60
61
62       --template=""      Template string or path to template file to use when
63       -o=go-template, -o=go-template-file. The template format is golang tem‐
64       plates [http://golang.org/pkg/text/template/#pkg-overview].
65
66
67

OPTIONS INHERITED FROM PARENT COMMANDS

69       --as=""      Username to impersonate for the operation. User could be a
70       regular user or a service account in a namespace.
71
72
73       --as-group=[]      Group to impersonate for the  operation,  this  flag
74       can be repeated to specify multiple groups.
75
76
77       --as-uid=""      UID to impersonate for the operation.
78
79
80       --azure-container-registry-config=""       Path  to the file containing
81       Azure container registry configuration information.
82
83
84       --cache-dir="/builddir/.kube/cache"      Default cache directory
85
86
87       --certificate-authority=""      Path to a cert file for the certificate
88       authority
89
90
91       --client-certificate=""      Path to a client certificate file for TLS
92
93
94       --client-key=""      Path to a client key file for TLS
95
96
97       --cluster=""      The name of the kubeconfig cluster to use
98
99
100       --context=""      The name of the kubeconfig context to use
101
102
103       --insecure-skip-tls-verify=false      If true, the server's certificate
104       will not be checked for validity. This will make your HTTPS connections
105       insecure
106
107
108       --kubeconfig=""       Path  to  the  kubeconfig file to use for CLI re‐
109       quests.
110
111
112       --match-server-version=false       Require  server  version  to   match
113       client version
114
115
116       -n,  --namespace=""       If  present, the namespace scope for this CLI
117       request
118
119
120       --password=""      Password for basic authentication to the API server
121
122
123       --profile="none"        Name   of   profile   to   capture.   One    of
124       (none|cpu|heap|goroutine|threadcreate|block|mutex)
125
126
127       --profile-output="profile.pprof"       Name  of  the  file to write the
128       profile to
129
130
131       --request-timeout="0"      The length of time to wait before giving  up
132       on  a  single  server  request. Non-zero values should contain a corre‐
133       sponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't time‐
134       out requests.
135
136
137       -s, --server=""      The address and port of the Kubernetes API server
138
139
140       --tls-server-name=""       Server  name  to  use for server certificate
141       validation. If it is not provided, the hostname  used  to  contact  the
142       server is used
143
144
145       --token=""      Bearer token for authentication to the API server
146
147
148       --user=""      The name of the kubeconfig user to use
149
150
151       --username=""      Username for basic authentication to the API server
152
153
154       --version=false      Print version information and quit
155
156
157       --warnings-as-errors=false      Treat warnings received from the server
158       as errors and exit with a non-zero exit code
159
160
161

EXAMPLE

163                # Request a token to authenticate to the kube-apiserver as the service account "myapp" in the current namespace
164                kubectl create token myapp
165
166                # Request a token for a service account in a custom namespace
167                kubectl create token myapp --namespace myns
168
169                # Request a token with a custom expiration
170                kubectl create token myapp --duration 10m
171
172                # Request a token with a custom audience
173                kubectl create token myapp --audience https://example.com
174
175                # Request a token bound to an instance of a Secret object
176                kubectl create token myapp --bound-object-kind Secret --bound-object-name mysecret
177
178                # Request a token bound to an instance of a Secret object with a specific uid
179                kubectl create token myapp --bound-object-kind Secret --bound-object-name mysecret --bound-object-uid 0d4691ed-659b-4935-a832-355f77ee47cc
180
181
182
183

HISTORY

190       January 2015, Originally compiled by Eric Paris (eparis at  redhat  dot
191       com)  based  on the kubernetes source material, but hopefully they have
192       been automatically generated since!
193
194
195
196Manuals                              User            KUBERNETES(1)(kubernetes)