### 制作租戶訪問證書 ###

openssl genrsa -out ethan.key 2048

openssl req -new -key ethan.key -out ethan.csr -subj "/CN=ethan/O=test"

openssl x509 -req -in ethan.csr -CA /etc/kubernetes/pki/ca.crt -CAkey /etc/kubernetes/pki/ca.key -CAcreateserial -out ethan.crt -days 10000

### 配置config文件 ###

kubectl config set-credentials ethan --client-certificate=ethan.crt --client-key=ethan.key

kubectl config set-context ethan-context --cluster=cluster.local --namespace=test --user=ethan

### 新建一條屬于自己命令空間的Role ###

cat > roleByNamespaces.yaml <

kind: Role

apiVersion: rbac.authorization.k8s.io/v1

metadata:

namespace: test #< namespace 需新建>

name: myrole

rules:

- apiGroups: ["*"]

resources: ["*"]

verbs: ["get", "watch", "list", "create", "update", "patch", "delete"]

EOF

### 租戶綁定命名空間以及Role ###

kind: RoleBinding

apiVersion: rbac.authorization.k8s.io/v1

metadata:

name: ethan-test

namespace: test

subjects:

- kind: User

name: ethan

apiGroup: rbac.authorization.k8s.io

roleRef:

kind: Role

name: myrole

apiGroup: rbac.authorization.k8s.io

kubectl --context=ethan-context get po

總結

以上是生活随笔為你收集整理的k8s 多租户_k8s使用rbac实现多租户的全部內容，希望文章能夠幫你解決所遇到的問題。

如果覺得生活随笔網站內容還不錯，歡迎將生活随笔推薦給好友。