oadm-create-api-client-config man page

oadm create-api-client-config — Create a config file for connecting to the server as a user

Synopsis

oadm create-api-client-config [Options]

Description

Create a client configuration for connecting to the server

This command creates a folder containing a client certificate, a client key, a server certificate authority, and a .kubeconfig file for connecting to the master as the provided user.

Options

--basename=""
   The base filename to use for the .crt, .key, and .kubeconfig files. Defaults to the username.
--certificate-authority=[openshift.local.config/master/ca.crt]
   Files containing signing authorities to use to verify the API server's serving certificate.
--client-dir=""
   The client data directory.
--groups=[]
   The list of groups this user belongs to. Comma delimited list
--master=" ⟨https://localhost:8443"⟩
   The API server's URL.
--public-master=""
   The API public facing server's URL (if applicable).
--signer-cert="openshift.local.config/master/ca.crt"
   The certificate file.
--signer-key="openshift.local.config/master/ca.key"
   The key file.
--signer-serial="openshift.local.config/master/ca.serial.txt"
   The serial file that keeps track of how many certs have been signed.
--user=""
   The scope qualified username.

Options Inherited from Parent Commands

--api-version=""
   DEPRECATED: The API version to use when talking to the server
--as=""
   Username to impersonate for the operation
--client-certificate=""
   Path to a client certificate file for TLS
--client-key=""
   Path to a client key file for TLS
--cluster=""
   The name of the kubeconfig cluster to use
--config=""
   Path to the config file to use for CLI requests.
--context=""
   The name of the kubeconfig context to use
--google-json-key=""
   The Google Cloud Platform Service Account JSON Key to use for authentication.
--insecure-skip-tls-verify=false
   If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
--log-flush-frequency=0
   Maximum number of seconds between log flushes
--match-server-version=false
   Require server version to match client version
-n, --namespace=""
   If present, the namespace scope for this CLI request
--request-timeout="0"
   The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.
--server=""
   The address and port of the Kubernetes API server
--token=""
   Bearer token for authentication to the API server

See Also

oadm(1),

History

June 2016, Ported from the Kubernetes man-doc generator

Referenced By

oadm(1).

Openshift CLI User Manuals June 2016