命令

kubectl get sa common-upgrade-api -n kube-system // 查询 service Accounts

kubectl create token common-upgrade-api --duration 24h -n kube-system // 创建token给sa账户

kubectl create secret generic common-upgrade-api-token --from-literal=token=eyJhbGciOiJSUzI1NiIsImtpZCI6InlKVGU1VkgybS1lTXdRZnpVemhBUzJvV3hhNDVxRnh5SE5uR0xWcE90Q0EifQ.eyJhdWQiOlsiaHR0cHM6Ly9rdWJlcm5ldGVzLmRlZmF1bHQuc3ZjIl0sImV4cCI6MTc0MzU5Mzg2NywiaWF0IjoxNzQzNTA3NDY3LCJpc3MiOiJodHRwczovL2t1YmVybmV0ZXMuZGVmYXVsdC5zdmMiLCJqdGkiOiIzNGVmMjJiZS1hYTFjLTRmMGItOTFmOC1mNzQzYjIzZmNkYTkiLCJrdWJlcm5ldGVzLmlvIjp7Im5hbWVzcGFjZSI6Imt1YmUtc3lzdGVtIiwic2VydmljZWFjY291bnQiOnsibmFtZSI6ImNvbW1vbi11cGdyYWRlLWFwaSIsInVpZCI6ImNiOWY4OTE3LTZkZmItNDM1ZC05ZTBiLTVmYzgwYmRkOWM0MyJ9fSwibmJmIjoxNzQzNTA3NDY3LCJzdWIiOiJzeXN0ZW06c2VydmljZWFjY291bnQ6a3ViZS1zeXN0ZW06Y29tbW9uLXVwZ3JhZGUtYXBpIn0.qfTFtEavKqAh35vVkVXW0NF6-GwvTYRnX7lqwAwTGJX3AyG9I7AWVuPRKwMAMfpDOm1twkftpU8dFSFqEw7R7kEeOTCfzHn0xl1rVQo752_NlZg05NmCLmDX6vexCiRbA0nr-3NRvaywRwcCYaRyyuDev0xnGKedb9lczSDefz1sbXLYJVMuHBqKfPS0B3QDUKAG_D7jpgMl3DifacOmcDScAdaooBg8Oj1ndX9igw1RmisgLK7ysbyY1z8VjCvxd4xoXy9weTkO_ARoyYZdaUypUVkELnYl8WTpUlmvdp3OYENRagfvfQeCu8wizgwmeasdquyiMHL-13E9saGHyQ -n kube-system // 手动创建secret绑定token


kubectl -n kube-system get secret | grep common-upgrade-api | awk '{print $1}' // 查询sa账户的secret

kubectl -n kube-system get secret | grep common-upgrade-api // 查询sa账户的secret

kubectl -n kube-system describe secret common-upgrade-api-token | grep token: | awk '{print $2}'

kubectl -n kube-system get secret common-upgrade-api-token -o jsonpath='{.data.token}' | base64 -d