第 3 章 Cluster access with kubeconfig

The two categories of kubeconfig files used in MicroShift are local access and remote access. Every time MicroShift starts, a set of kubeconfig files for local and remote access to the API server are generated. These files are generated in the /var/lib/microshift/resources/kubeadmin/ directory using preexisting configuration information.

Each access type requires a different authentication certificate signed by different Certificate Authorities (CAs). The generation of multiple kubeconfig files accommodates this need.

You can use the appropriate kubeconfig file for the access type needed in each case to provide authentication details. The contents of MicroShift kubeconfig files are determined by either default built-in values or a config.yaml file.

/var/lib/microshift/resources/kubeadmin/
├── kubeconfig 

├── alt-name-1 

│   └── kubeconfig
├── 1.2.3.4 

│   └── kubeconfig
└── microshift-rhel9 

    └── kubeconfig