8.4. Using a service account’s credentials externally

Procedure

1. View the service account’s API token:

   $ oc describe secret <secret_name>

   Copy to Clipboard Toggle word wrap

   For example:

   $ oc describe secret robot-token-uzkbh -n top-secret

   Copy to Clipboard Toggle word wrap

   Example output

   Name:		robot-token-uzkbh
   Labels:		<none>
   Annotations:	kubernetes.io/service-account.name=robot,kubernetes.io/service-account.uid=49f19e2e-16c6-11e5-afdc-3c970e4b7ffe
   
   Type:	kubernetes.io/service-account-token
   
   Data
   
   token:	eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9...

   Copy to Clipboard Toggle word wrap

2. Log in using the token that you obtained:

   $ oc login --token=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9...

   Copy to Clipboard Toggle word wrap

   Example output

   Logged into "https://server:8443" as "system:serviceaccount:top-secret:robot" using the token provided.
   
   You don't have any projects. You can try to create a new project, by running
   
       $ oc new-project <projectname>

   Copy to Clipboard Toggle word wrap

3. Confirm that you logged in as the service account:

   $ oc whoami

   Copy to Clipboard Toggle word wrap

   Example output

   system:serviceaccount:top-secret:robot

   Copy to Clipboard Toggle word wrap