openshift-cli-serviceaccounts-new-token man page

openshift cli serviceaccounts new-token — Generate a new token for a service account.

Synopsis

openshift cli serviceaccounts new-token [Options]

Description

Generate a new token for a service account.

Service account API tokens are used by service accounts to authenticate to the API. This command will generate a new token, which could be used to compartmentalize service account actions by executing them with distinct tokens, to rotate out pre-existing token on the service account, or for use by an external client. If a label is provided, it will be applied to any created token so that tokens created with this command can be idenitifed.

Options

-l, --labels=""

labels to set in all resources for this application, given as a comma-delimited list of key-value pairs

--timeout=0

the maximum time allowed to generate a token

Options Inherited from Parent Commands

--api-version=""

DEPRECATED: The API version to use when talking to the server

--as=""

Username to impersonate for the operation

--certificate-authority=""

Path to a cert. file for the certificate authority

--client-certificate=""

Path to a client certificate file for TLS

--client-key=""

Path to a client key file for TLS

--cluster=""

The name of the kubeconfig cluster to use

--config=""

Path to the config file to use for CLI requests.

--context=""

The name of the kubeconfig context to use

--google-json-key=""

The Google Cloud Platform Service Account JSON Key to use for authentication.

--insecure-skip-tls-verify=false

If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure

--log-flush-frequency=0

Maximum number of seconds between log flushes

--match-server-version=false

Require server version to match client version

-n, --namespace=""

If present, the namespace scope for this CLI request

--request-timeout="0"

The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests.

--server=""

The address and port of the Kubernetes API server

--token=""

Bearer token for authentication to the API server

--user=""

The name of the kubeconfig user to use

Example

  # Generate a new token for service account 'default'
  openshift cli serviceaccounts new-token 'default'
  
  # Generate a new token for service account 'default' and apply
  # labels 'foo' and 'bar' to the new token for identification
  # openshift cli serviceaccounts new-token 'default' --labels foo=foo-value,bar=bar-value

See Also

openshift-cli-serviceaccounts(1),

History

June 2016, Ported from the Kubernetes man-doc generator

Referenced By

openshift-cli-serviceaccounts(1).

Openshift CLI User Manuals June 2016