Acquiring a token for Kubernetes dashboard

by Giang Pham 29 March, 2020

29 March, 2020

If you’re ended up choosing this option to log in to your Kubernetes dashboard but don’t know how, this post helps you out with that.

Create a Service Account


<span class="token key atrule">apiVersion</span><span class="token punctuation">:</span> v1
<span class="token key atrule">kind</span><span class="token punctuation">:</span> ServiceAccount
<span class="token key atrule">metadata</span><span class="token punctuation">:</span>
  <span class="token key atrule">name</span><span class="token punctuation">:</span> admin<span class="token punctuation">-</span>user
  <span class="token key atrule">namespace</span><span class="token punctuation">:</span> kube<span class="token punctuation">-</span>system

kubectl apply -f dashboard-adminuser.yml
serviceaccount/admin-user created

Create ClusterRoleBinding

<span class="token key atrule">apiVersion</span><span class="token punctuation">:</span> rbac.authorization.k8s.io/v1
<span class="token key atrule">kind</span><span class="token punctuation">:</span> ClusterRoleBinding
<span class="token key atrule">metadata</span><span class="token punctuation">:</span>
  <span class="token key atrule">name</span><span class="token punctuation">:</span> admin<span class="token punctuation">-</span>user
<span class="token key atrule">roleRef</span><span class="token punctuation">:</span>
  <span class="token key atrule">apiGroup</span><span class="token punctuation">:</span> rbac.authorization.k8s.io
  <span class="token key atrule">kind</span><span class="token punctuation">:</span> ClusterRole
  <span class="token key atrule">name</span><span class="token punctuation">:</span> cluster<span class="token punctuation">-</span>admin
<span class="token key atrule">subjects</span><span class="token punctuation">:</span>
<span class="token punctuation">-</span> <span class="token key atrule">kind</span><span class="token punctuation">:</span> ServiceAccount
  <span class="token key atrule">name</span><span class="token punctuation">:</span> admin<span class="token punctuation">-</span>user
  <span class="token key atrule">namespace</span><span class="token punctuation">:</span> kube<span class="token punctuation">-</span>system

kubectl apply -f admin-role-binding.yml
clusterrolebinding.rbac.authorization.k8s.io/admin-user created

Get the Access Token

kubectl -n kube-system describe secret <span class="token punctuation">$(</span>kubectl -n kube-system get secret <span class="token operator">|</span> <span class="token function">grep</span> admin-user <span class="token operator">|</span> <span class="token function">awk</span> <span class="token string">'{print <span class="token variable">$1</span>}'</span><span class="token punctuation">)</span>

Name:         admin-user-token-mqgx6
Namespace:    kube-system
Labels:       
Annotations:  kubernetes.io/service-account.name: admin-user
              kubernetes.io/service-account.uid: 132a8df1-139b-4e27-85e1-eb9b6e99cd48
Type:  kubernetes.io/service-account-token
Data
====
ca.crt:     1720 bytes
namespace:  11 bytes
token:      eyJhbGciOiJSUzI1NiIsImtpZCI6ImVjQ1JBOXJEUjFLUlFKS ....

Login

Select the token option, copy the token from the terminal and paste it there:

Acquiring a token for Kubernetes dashboard

Create a Service Account

Create ClusterRoleBinding

Get the Access Token

Login

Deploying to Azure Kubernetes Service (AKS) on an existing Azure VNet using Ansible

Windows Authentication for Linux containers running inside Azure Kubernetes Service (AKS)

You may also like