expand/awx-on-k3s
1
0
Fork 0
mirror of https://github.com/Expand-sys/awx-on-k3s synced 2026-03-22 19:17:08 +11:00
Code Issues Projects Releases Packages Wiki Activity Actions

fix: add description for the way to obtain token for sa

Browse source
This commit is contained in:
kurokobo 2022-08-11 15:42:03 +09:00
parent 5adf4bc093
commit cf4dfb828d
1 changed files with 5 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
backup/ansible/README.md
View file

@ -58,11 +58,14 @@ rolebinding.rbac.authorization.k8s.io/awx-backup created
Obtain the API Token which required to authenticate the Kubernetes API. This token will be used later. Obtain the API Token which required to authenticate the Kubernetes API. This token will be used later.
```bash ```bash
# Kubernetes 1.24 or later # For Kubernetes 1.24 or later:
# This will generate new token that valid for 87600 hours (10 years).
# Of course you can modify the value since "87600h" is just an example.
$ kubectl -n awx create token awx-backup --duration=87600h $ kubectl -n awx create token awx-backup --duration=87600h
eyJhbGciOiJSUzI...hcGsPI5MzmaMHQvw eyJhbGciOiJSUzI...hcGsPI5MzmaMHQvw
# Kubernetes 1.23 or earlier # For Kubernetes 1.23 or earlier:
# Obtain and decode token from Secret that automatically generated for the Service Account.
$ SECRET=$(kubectl -n ${NAMESPACE} get sa awx-backup -o jsonpath='{.secrets[0].name}') $ SECRET=$(kubectl -n ${NAMESPACE} get sa awx-backup -o jsonpath='{.secrets[0].name}')
$ kubectl -n ${NAMESPACE} get secret ${SECRET} -o jsonpath='{.data.token}' | base64 -d $ kubectl -n ${NAMESPACE} get secret ${SECRET} -o jsonpath='{.data.token}' | base64 -d
eyJhbGciOiJSUzI...hcGsPI5MzmaMHQvw eyJhbGciOiJSUzI...hcGsPI5MzmaMHQvw