10.4. 在外部使用服务帐户凭证

流程

1. 查看服务帐户的 API 令牌：

   $ oc describe secret <secret-name>

   Copy to Clipboard Toggle word wrap

   例如：

   $ oc describe secret robot-token-uzkbh -n top-secret
   
   Name:		robot-token-uzkbh
   Labels:		<none>
   Annotations:	kubernetes.io/service-account.name=robot,kubernetes.io/service-account.uid=49f19e2e-16c6-11e5-afdc-3c970e4b7ffe
   
   Type:	kubernetes.io/service-account-token
   
   Data
   
   token:	eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9...

   Copy to Clipboard Toggle word wrap

2. 使用您获取的令牌进行登录：

   $ oc login --token=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9...
   
   Logged into "https://server:8443" as "system:serviceaccount:top-secret:robot" using the token provided.
   
   You don't have any projects. You can try to create a new project, by running
   
       $ oc new-project <projectname>

   Copy to Clipboard Toggle word wrap

3. 确认您已经以服务帐户登录：

   $ oc whoami
   
   system:serviceaccount:top-secret:robot

   Copy to Clipboard Toggle word wrap