New to Kubernetes I struggle to log into kubernetes dashboard.
and
kubectl get clusterrolebinding admin-user -n kube-system -o yaml shows:
apiVersion: kind: ClusterRoleBinding metadata: annotations: | {"apiVersion":"","kind":"ClusterRoleBinding","metadata":{"annotations":{},"name":"admin-user"},"roleRef":{"apiGroup":"rbac.authorization.k8s.io","kind":"ClusterRole","name":"cluster-admin"},"subjects":[{"kind":"ServiceAccount","name":"admin-user","namespace":"kube-system"}]} creationTimestamp: "2019-01-15T15:48:33Z" name: admin-user resourceVersion: "2096" selfLink: /apis/ uid: 0361cb77-18dd-11e9-b02d-bc305b9f3aeb roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole name: cluster-admin subjects: - kind: ServiceAccount name: admin-user namespace: kube-system Now kubectl -n kube-system get secret | egrep admin doesn't show anything (in contradiction to the statement of the page above...) What am I missing?
TIA !
4 Answers
One line solution:
kubectl get secrets -o jsonpath="{.items[?(@.metadata.annotations['kubernetes\.io/service-account\.name']=='default')].data.token}"|base64 --decode Found in official documentation:
Here is the full example with creating admin user and getting token:
Creating a admin / service account user called k8sadmin
sudo kubectl create serviceaccount k8sadmin -n kube-system Give the user admin privileges
sudo kubectl create clusterrolebinding k8sadmin --clusterrole=cluster-admin --serviceaccount=kube-system:k8sadmin Get the token
sudo kubectl -n kube-system describe secret $(sudo kubectl -n kube-system get secret | (grep k8sadmin || echo "$_") | awk '{print $1}') | grep token: | awk '{print $2}' Use this bash script to obtain the bearer token for the Kubernetes dashboard log in screen. The script will copy the token and to your native OS clipboard so it can be pasted into the login form, token value field.
Wiki now includes command to describe secret with token. But if you only want to get token you can use something like below. This will print the token for user admin-user.
kubectl -n kube-system describe secret $(kubectl -n kube-system get secret | (grep admin-user || echo "$_") | awk '{print $1}') | grep token: | awk '{print $2}' If it fails to find secret you will get:
Error from server (NotFound): secrets "admin-user" not found 
