Service account token for the Rancher Kubernetes cluster | SUSE Rancher and RKE Kubernetes cluster using CSI Driver on DELL EMC PowerFlex | Dell Technologies Info Hub

Your Browser is Out of Date

Nytro.ai uses technology that works best in other browsers.
For a full experience use one of the browsers below

Service account token for the Rancher Kubernetes cluster

Service account token for the Rancher Kubernetes cluster

Thank you for your feedback!

The service account must have the following privileges:
- Get, Create, Update, and List for CustomResourceDefinitions.
- Get, Create, and Update ClusterRoleBinding for 'cluster-admin' role.
- Create and Update for the PowerProtect namespace.
- Get, List, Create, Update, Delete, and List.
- Get, List, Create, Update, and Delete for all kinds of resources inside the PowerProtect namespace.
- Get, List, and Watch for all the namespaces in the cluster and PV, PVC, storageclass, deployments, and pods in all the namespaces.
Note: The admin-user service account in the kube system namespace contains all the privileges. You can use the token of this account or an existing similar service account. Alternatively, you can create a service account that is bound to a cluster role that contains these privileges and provide the token of this service account.
- Run the following commands to create a service account for registering the Kubernetes cluster with PowerProtect Data Manager:
kubectl create serviceaccount dashboard -n default
kubectl create clusterrolebinding dashboard-admin -n default --clusterrole=cluster-admin --serviceaccount=default:dashboard
- Run the following command to obtain the service account token:
kubectl get secret $(kubectl get serviceaccount dashboard -o jsonpath="{.secrets[0].name}") -o jsonpath="{.data.token}" | base64 –decode