github/container.training
1
0
Fork 0
mirror of https://github.com/jpetazzo/container.training.git synced 2026-07-18 12:29:18 +00:00
Code Issues Packages Projects Releases Wiki Activity

Tweaks

Browse Source
This commit is contained in:
Jerome Petazzoni
2019-06-02 09:27:00 -05:00
parent 59c2ff1911
commit 5aedee5564
1 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
slides/k8s/openid-connect.md
View File

@@ -88,7 +88,7 @@
- We will use the JWT to authenticate
.footnote[If you can't or won't use a Google Account, you can try to adapt to another provider.]
.footnote[If you can't or won't use a Google account, you can try to adapt to another provider.]
---
@@ -276,12 +276,14 @@ cannot list resource "nodes" in API group "" at the cluster scope
.exercise[
- Create a ClusterRoleBinding allowing us read access to the cluster:
- Create a ClusterRoleBinding allowing us to view resources:
```bash
kubectl create clusterrolebinding i-can-view \
--user=`jean.doe@gmail.com` --clusterrole=view
```
(make sure to put *your* Google email address there)
- Confirm that we can now list pods with our token:
```bash
kubectl --user=myjwt get pods