mirror of
https://github.com/open-cluster-management-io/ocm.git
synced 2026-02-14 18:09:57 +00:00
4b3cb4f45b
* Access spoke api using cluster-proxy Signed-off-by: Jian Qiu <jqiu@redhat.com> * Add remote access scenario Signed-off-by: Jian Qiu <jqiu@redhat.com>
57 lines
1.3 KiB
Markdown
57 lines
1.3 KiB
Markdown
# Access APIServer of managed cluster
|
|
|
|
## Prerequisite
|
|
|
|
- Set up the dev environment in your local machine following [setup dev environment](../setup-dev-environment).
|
|
- helm is installed
|
|
- Add ocm helm repo with `helm repo add ocm https://openclustermanagement.blob.core.windows.net/releases/`
|
|
|
|
## Install cluster-proxy and managed-serviceaccount addon on the clusters
|
|
|
|
Install cluster-proxy addon:
|
|
|
|
```
|
|
helm install \
|
|
-n open-cluster-management-addon --create-namespace \
|
|
cluster-proxy ocm/cluster-proxy
|
|
```
|
|
|
|
Check the status of the cluster-proxy addon
|
|
|
|
```
|
|
clusteradm get addon cluster-proxy
|
|
```
|
|
|
|
Install managed-serviceaccount addon:
|
|
|
|
```
|
|
helm install \
|
|
-n open-cluster-management-addon --create-namespace \
|
|
managed-serviceaccount ocm/managed-serviceaccount
|
|
```
|
|
|
|
Check the status of the managed-serviceaccount addon
|
|
|
|
```
|
|
clusteradm get addon managed-serviceaccount
|
|
```
|
|
|
|
## Create a managed service account and set rbac
|
|
|
|
Create managed-service account on hub
|
|
|
|
```
|
|
kubectl apply -f manifests/managed-sa.yaml
|
|
```
|
|
|
|
create a clusterrolebinding on managed cluster to set permission for this service account
|
|
|
|
```
|
|
clusteradm create work rbac -f manifests/clusterrolebinding.yaml --cluster cluster1
|
|
```
|
|
|
|
## Use the clusteradm proxy command
|
|
|
|
```
|
|
clusteradm proxy kubectl --cluster=cluster1 --sa=test --args="get nodes"
|
|
``` |