kubesandbox remote access

k8sandbox-remote.md

As I was testing around with https://bitnami.com/stack/kubernetes-sandbox I wanted to remotely access it

First find the token, by getting on the server, which is configured to trust any local user to be cluster admin with kubectl

TOKEN=$(kubectl get secrets -n kube-system | grep default-token | awk '{print $2}')
kubectl describe secret $TOKEN -n kube-system | grep token:

Now give that default user the cluster admin role

kubectl create clusterrolebinding admin-role --clusterrole=cluster-admin --serviceaccount=kube-system:default

Then create a local ~/.kube/config-sandbox

apiVersion: v1
clusters:
- cluster:
    insecure-skip-tls-verify: true
    server: https://<ip>:6443
  name: default
contexts:
- context:
    cluster: default
    namespace: default
    user: default
  name: default
current-context: default
kind: Config
preferences: {}
users:
- name: default
  user:
    token: <xxx>

where

• <ip> is the ip of the server
• <xxx> is the default-token-xxxx in the secrets

Now I can, locally

export KUBECONFIG=$KUBECONFIG:$HOME/.kube/config-sandbox
kubectl get pods --all-namespaces