3.4. Generating additional kubeconfig files for remote access

Procedure

1. Optional: You can show the contents of the config.yaml. Run the following command:

   $ cat /etc/microshift/config.yaml

2. Optional: You can show the contents of the remote-access kubeconfig file. Run the following command:

   $ cat /var/lib/microshift/resources/kubeadmin/<hostname>/kubeconfig

   重要

   Additional remote access kubeconfig files must include one of the server names listed in the Red Hat build of MicroShift config.yaml file. Additional kubeconfig files must also use the same CA for validation.

3. To generate additional kubeconfig files for additional DNS names SANs or external IP addresses, add the entries you need to the apiServer.subjectAltNames field. In the following example, the DNS name used is alt-name-1 and the IP address is 1.2.3.4.

   Example config.yaml with additional authentication values

   dns:
     baseDomain: example.com
   node:
     hostnameOverride: "microshift-rhel9" 

   1

   
     nodeIP: 10.0.0.1
   apiServer:
     subjectAltNames:
     - alt-name-1 

   2

   
     - 1.2.3.4 

   3

   1

   Hostname

   2

   DNS name

   3

   IP address or range

4. Restart MicroShift to apply configuration changes and auto-generate the kubeconfig files you need by running the following command:

   $ sudo systemctl restart microshift

5. To check the contents of additional remote-access kubeconfig files, insert the name or IP address as listed in the config.yaml into the cat command. For example, alt-name-1 is used in the following example command:

   $ cat /var/lib/microshift/resources/kubeadmin/alt-name-1/kubeconfig

6. Choose the kubeconfig file to use that contains the SAN or IP address you want to use to connect your cluster. In this example, the kubeconfig containing`alt-name-1` in the cluster.server field is the correct file.

   Example contents of an additional kubeconfig file

   clusters:
   - cluster:
       certificate-authority-data: <base64 CA>
       server: https://alt-name-1:6443 

   1

   1

   The /var/lib/microshift/resources/kubeadmin/alt-name-1/kubeconfig file values are from the apiServer.subjectAltNames configuration values.