Minikube: Exemplo com Autenticação - Revision history

Ebasso at 01:16, 26 February 2019

2019-02-26T01:16:37Z

← Older revision		Revision as of 01:16, 26 February 2019
Line 1:		Line 1:
			EM RASCUNHO AINDA

	1) Levantando o Minikube		1) Levantando o Minikube

Ebasso at 01:16, 26 February 2019

2019-02-26T01:16:07Z

← Older revision		Revision as of 01:16, 26 February 2019
Line 150:		Line 150:
	</nowiki>		</nowiki>

	kubectl create -f role.yml		kubectl create -f role-binding.yml

			kubectl --context=ebasso-context get pods

	= Ver também =		= Ver também =

Ebasso at 01:14, 26 February 2019

2019-02-26T01:14:23Z

← Older revision		Revision as of 01:14, 26 February 2019
Line 137:		Line 137:

	<nowiki>		<nowiki>
	cat > role.yml << EOF		cat > role-binding.yml << EOF
			kind: RoleBinding
	apiVersion: rbac.authorization.k8s.io/v1		apiVersion: rbac.authorization.k8s.io/v1
	~~kind: Role~~
	metadata:		metadata:
	name: ~~ebasso~~-~~csr~~		name: pod-read-access
	~~rules~~:		namespace: lfs
	~~- apiGrous~~: ~~[""] # "" indicates the~~		roleRef:
	~~resources~~: ~~["pods"]~~		kind: Role
	~~verbs~~: ~~["get", "watch", "list"]~~		name: pod-reader
			apiGroup: rbac.authorization.k8s.io
	EOF		EOF
	</nowiki>		</nowiki>

			kubectl create -f role.yml

	= Ver também =		= Ver também =

Ebasso at 01:06, 26 February 2019

2019-02-26T01:06:42Z

← Older revision		Revision as of 01:06, 26 February 2019
Line 136:		Line 136:
	)		)

	<nowiki>		<nowiki>
	cat > role.yml << EOF		cat > role.yml << EOF
	apiVersion: rbac.authorization.k8s.io/v1		apiVersion: rbac.authorization.k8s.io/v1

Ebasso at 01:06, 26 February 2019

2019-02-26T01:06:08Z

← Older revision		Revision as of 01:06, 26 February 2019
Line 57:		Line 57:
	) Criando uma namespace		) Criando uma namespace

	kubectl create namespace ~~lfs158~~		kubectl create namespace ns-exemplo-autenticacao


Line 102:		Line 102:



			kubectl get csr

			Resultado:

			NAME AGE REQUESTOR CONDITION
			ebasso-csr 2m16s minikube-user '''Pending'''

			)

			kubectl certificate approve '''ebasso-csr'''


			kubectl get csr

			Resultado:

			NAME AGE REQUESTOR CONDITION
			ebasso-csr 4m33s minikube-user '''Approved'''

			)

			kubectl get csr ebasso-csr -o jsonpath='{.status.certificate}'\| base64 --decode > ebasso.crt


			kubectl config set-credentials ebasso --client-certificate=ebasso.crt --client-key=key


			kubectl get csr ebasso-csr -o jsonpath='{.status.certificate}'\| base64 --decode > ebasso.crt

			kubectl run nginx --image=nginx:apline -n ns-exemplo-autenticacao

			)

			<nowiki>
			cat > role.yml << EOF
			apiVersion: rbac.authorization.k8s.io/v1
			kind: Role
			metadata:
			name: ebasso-csr
			rules:
			- apiGrous: [""] # "" indicates the
			resources: ["pods"]
			verbs: ["get", "watch", "list"]
			EOF
			</nowiki>

Ebasso at 00:44, 26 February 2019

2019-02-26T00:44:17Z

← Older revision		Revision as of 00:44, 26 February 2019
Line 73:		Line 73:

	Resultado		Resultado
	~~LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQ2FUQ0NBVkVDQVFBd0pERVBNQTBHQTFVRUF3d0daV0poYzNOdk1SRXdEd1lEVlFRS0RBaGpiMjF3WV~~		LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQ2FUQ0NBVkVDQVFBd0pERVBNQTBHQTFVRUF3d0daV0poYzNOdk1SRXdEd1lEVlFRS
	...		...
	~~0YKcnFEOVB0T0UvVVRLRjB1U3h5cGlLaEs3a2VZNHNSdnJaUlBVVmdBRGx1NXp1aWRqajdnQmtBdzlJQ1dHCi0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo~~=		vVVRLRjB1U3h5cGlLaEs3a2VZNHNSdnJaUlBVVmdBRGx1NXp1aWRqajdnQmtBdzlJQ1dHCi0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo=


	<nowiki>		<nowiki>
	cat > signing-request.yml << EOF		cat > signing-request.yml << EOF
	apiVersion: certificates.k8s.io/v1beta1		apiVersion: certificates.k8s.io/v1beta1
Line 87:		Line 87:
	groups:		groups:
	- system:authenticated		- system:authenticated
	request: ~~LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQ2FUQ0NBVkVDQVFBd0pERVBNQTBHQTFVRUF3d0daV0poYzNOdk1SRXdEd1lEVlFRS0RBaGpiMjF3WV~~		request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQ2FUQ0NBVkVDQVFBd0pERVBNQTBHQTFVRUF3d0daV0poYzNOdk1SRXdEd1lEVlF
	...		...
	~~0YKcnFEOVB0T0UvVVRLRjB1U3h5cGlLaEs3a2VZNHNSdnJaUlBVVmdBRGx1NXp1aWRqajdnQmtBdzlJQ1dHCi0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo~~=		vVVRLRjB1U3h5cGlLaEs3a2VZNHNSdnJaUlBVVmdBRGx1NXp1aWRqajdnQmtBdzlJQ1dHCi0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo=
	usages:		usages:
	- digital signature		- digital signature

Ebasso at 00:42, 26 February 2019

2019-02-26T00:42:31Z

@@ Line 53: / Line 53: @@
      client-key: /Users/ebasso/.minikube/client.key
 </nowiki>
 = Ver também =

Ebasso: Criou a página com "1) Levantando o Minikube minikube start --extra-config=controller-manager.ClusterSigningCertFile="/var/lib/localkube/certs/ca.crt" \ --extra-config=controller-manager.C..."

2019-02-26T00:19:02Z

Criou a página com "1) Levantando o Minikube minikube start --extra-config=controller-manager.ClusterSigningCertFile="/var/lib/localkube/certs/ca.crt" \ --extra-config=controller-manager.C..."

New page

1) Levantando o Minikube

minikube start --extra-config=controller-manager.ClusterSigningCertFile="/var/lib/localkube/certs/ca.crt" \
--extra-config=controller-manager.ClusterSigningKeyFile="/var/lib/localkube/certs/ca.key" \
--extra-config=apiserver.authorization-mode=RBAC

Resultado:

<nowiki>
😄 minikube v0.34.1 on darwin (amd64)
💡 Tip: Use 'minikube start -p <name>' to create a new cluster, or 'minikube delete' to delete this one.
🏃 Re-using the currently running virtualbox VM for "minikube" ...
⌛ Waiting for SSH access ...
📶 "minikube" IP address is 192.168.99.100
🐳 Configuring Docker as the container runtime ...
✨ Preparing Kubernetes environment ...
▪ controller-manager.ClusterSigningCertFile=/var/lib/localkube/certs/ca.crt
▪ controller-manager.ClusterSigningKeyFile=/var/lib/localkube/certs/ca.key
▪ apiserver.authorization-mode=RBAC
🚜 Pulling images required by Kubernetes v1.13.3 ...
🔄 Relaunching Kubernetes v1.13.3 using kubeadm ...
⌛ Waiting for kube-proxy to come back up ...
🤔 Verifying component health .....
💗 kubectl is now configured to use "minikube"
🏄 Done! Thank you for using minikube!
</nowiki>

2) Verificando a configuração, executando o comando:

kubectl config view

Resultado:

<nowiki>
apiVersion: v1
clusters:
- cluster:
certificate-authority: /Users/ebasso/.minikube/ca.crt
server: https://192.168.99.100:8443
name: minikube
contexts:
- context:
cluster: minikube
user: minikube
name: minikube
current-context: minikube
kind: Config
preferences: {}
users:
- name: minikube
user:
client-certificate: /Users/ebasso/.minikube/client.crt
client-key: /Users/ebasso/.minikube/client.key
</nowiki>

= Ver também =

* [[Kubernetes|Mais artigos sobre Kubernetes]]
* [[Docker: Trabalhando com Containers]]
* [[Cloud| Artigos sobre Cloud]]
* [[Tecnologias| Mais Artigos sobre Cloud / WebDev / Tecnologias]]

[[Category: Docker]]
[[Category: Kubernetes]]
[[Category: Minikube]]
[[Category: Cloud]]
[[Category: Tecnologias]]