kubernetes-training

Kube-apiserver

• Authenticate user
• Process req
• Authentication mechanisms: static pw file, static token file, certificates, identity services

  Basic Auth (deprecated)

  References

  1. Static password file
• create a csv file with password, usrname, uid
• pass the csv file to --basic-auth-file to kube-apiserver
• restart the kube-apiserver
• To authenticate:

    curl -v -k https://master-node-ip:6443/api/v1/pods -u "user1:password123"
  

1. Static Token file

[!Note] These are not recommended authentication mechanism because they’re not secure