{"id":70803,"date":"2024-07-25T23:48:49","date_gmt":"2024-07-25T20:18:49","guid":{"rendered":"https:\/\/nabfollower.com\/blog\/40-days-of-kubernetes-2240-533j\/"},"modified":"2024-07-25T23:48:49","modified_gmt":"2024-07-25T20:18:49","slug":"40-days-of-kubernetes-2240-533j","status":"publish","type":"post","link":"https:\/\/nabfollower.com\/blog\/40-days-of-kubernetes-2240-533j\/","title":{"rendered":"40 Days Of Kubernetes (22\/40)"},"content":{"rendered":"<p>Summarize this content to 400 words in Persian Lang <\/p>\n<p>  \u0631\u0648\u0632 22\/40<\/p>\n<p>\u0644\u06cc\u0646\u06a9 \u0648\u06cc\u062f\u06cc\u0648@piyushsachdeva \u0645\u062e\u0632\u0646 \u06af\u06cc\u062a\u0645\u0646 Git Repo<\/p>\n<p>\u0645\u0627 \u0646\u06af\u0627\u0647 \u0645\u06cc \u06a9\u0646\u06cc\u0645 authorization\u060c kubeconfig \u0648 \u0628\u0631\u062e\u06cc \u0645\u0641\u0627\u0647\u06cc\u0645 \u062f\u06cc\u06af\u0631\u062f\u0631 \u0648\u0627\u0642\u0639 \u0648\u0642\u062a\u06cc \u0641\u0631\u0645\u0627\u0646 \u0631\u0627 \u0627\u062c\u0631\u0627 \u0645\u06cc \u06a9\u0646\u06cc\u062f kubectl get pods\u060c \u0642\u0628\u0644 \u0627\u0632 \u0627\u06cc\u0646\u06a9\u0647 \u0628\u0647 \u0646\u062a\u06cc\u062c\u0647 \u0628\u0631\u0633\u06cc\u062f\u060c \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0645\u06cc \u0634\u0648\u06cc\u062f \u0648 \u0628\u0631\u0631\u0633\u06cc \u0645\u06cc \u06a9\u0646\u06cc\u062f \u06a9\u0647 \u0622\u06cc\u0627 \u0645\u062c\u0627\u0632 \u0647\u0633\u062a\u06cc\u062f \u0648 \u0627\u062c\u0627\u0632\u0647 \u0627\u062c\u0631\u0627\u06cc \u0627\u06cc\u0646 \u062f\u0633\u062a\u0648\u0631 \u0631\u0627 \u062f\u0631 \u06cc\u06a9 kubernetes \u062e\u0648\u0634\u0647.<\/p>\n<p>\u0627\u0632 \u0622\u0646\u062c\u0627\u06cc\u06cc \u06a9\u0647 \u062f\u0631 \u067e\u0633\u200c\u0632\u0645\u06cc\u0646\u0647\u060c \u0628\u0631\u062e\u06cc \u0627\u0632 \u062f\u0627\u062f\u0647\u200c\u0647\u0627 \u0628\u0647 \u062e\u0648\u0634\u0647 \u0627\u0631\u0633\u0627\u0644 \u0645\u06cc\u200c\u0634\u0648\u0646\u062f\u060c \u0634\u0645\u0627 \u0645\u062c\u0627\u0632 \u0628\u0647 \u0627\u062c\u0631\u0627\u06cc \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u062f\u0631 \u06cc\u06a9 \u062e\u0648\u0634\u0647 \u0647\u0633\u062a\u06cc\u062f \u06cc\u0627 \u0646\u06cc\u0633\u062a\u06cc\u062f.\u0645\u0627 \u0627\u06cc\u0646 \u06af\u0632\u06cc\u0646\u0647 \u0647\u0627 \u0631\u0627 \u0628\u0627 \u06cc\u06a9 \u0641\u0627\u06cc\u0644 \u06a9\u0627\u0646\u0641\u06cc\u06af \u0628\u0647 \u0646\u0627\u0645 \u0627\u0631\u0633\u0627\u0644 \u0645\u06cc \u06a9\u0646\u06cc\u0645 kubeconfig.<\/p>\n<p>\u062f\u0633\u062a\u0648\u0631 \u0648\u0627\u0642\u0639\u06cc \u0628\u0647 \u0627\u06cc\u0646 \u0635\u0648\u0631\u062a \u0627\u0633\u062a:<\/p>\n<p>root@localhost:~# kubectl get nodes &#8211;kubeconfig .kube\/config<br \/>\nNAME                       STATUS   ROLES           AGE   VERSION<br \/>\nlucky-luke-control-plane   Ready    control-plane   22d   v1.30.0<br \/>\nlucky-luke-worker          Ready              22d   v1.30.0<br \/>\nlucky-luke-worker2         Ready              22d   v1.30.0<\/p>\n<p>    \u0648\u0627\u0631\u062f \u062d\u0627\u0644\u062a \u062a\u0645\u0627\u0645 \u0635\u0641\u062d\u0647 \u0634\u0648\u06cc\u062f<\/p>\n<p>    \u0627\u0632 \u062d\u0627\u0644\u062a \u062a\u0645\u0627\u0645 \u0635\u0641\u062d\u0647 \u062e\u0627\u0631\u062c \u0634\u0648\u06cc\u062f<\/p>\n<p>\u062c\u0632\u0626\u06cc\u0627\u062a \u062f\u0631 kubeconfig \u0641\u0627\u06cc\u0644 \u0634\u0627\u0645\u0644:<\/p>\n<p>\u06af\u0648\u0627\u0647\u06cc-\u0645\u0631\u062c\u0639-\u062f\u0627\u062f\u0647<br \/>\n\u0633\u0631\u0648\u0631<br \/>\n\u0632\u0645\u06cc\u0646\u0647 \u0647\u0627<br \/>\n\u06a9\u0644\u0627\u06cc\u0646\u062a-\u06a9\u0644\u06cc\u062f-\u062f\u0627\u062f\u0647 \u0648 \u063a\u06cc\u0631\u0647.  \u0631\u0627 context \u0686\u06cc\u0632\u06cc \u0646\u06cc\u0633\u062a \u062c\u0632 \u062a\u0631\u06a9\u06cc\u0628\u06cc \u0627\u0632 user \u0648 cluster.<\/p>\n<p>(\u0639\u06a9\u0633 \u0627\u0632 \u0648\u06cc\u062f\u06cc\u0648)<\/p>\n<p>&#8230;<br \/>\ncontexts:<br \/>\n&#8211; context:<br \/>\n    cluster: kind-lucky-luke<br \/>\n    user: kind-lucky-luke<br \/>\n  name: kind-lucky-luke<br \/>\n&#8230;<\/p>\n<p>    \u0648\u0627\u0631\u062f \u062d\u0627\u0644\u062a \u062a\u0645\u0627\u0645 \u0635\u0641\u062d\u0647 \u0634\u0648\u06cc\u062f<\/p>\n<p>    \u0627\u0632 \u062d\u0627\u0644\u062a \u062a\u0645\u0627\u0645 \u0635\u0641\u062d\u0647 \u062e\u0627\u0631\u062c \u0634\u0648\u06cc\u062f<\/p>\n<p>  \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0686\u06cc\u0633\u062a \u0648 \u0645\u062c\u0648\u0632 \u0686\u06cc\u0633\u062a<\/p>\n<p>(\u0639\u06a9\u0633 \u0627\u0632 \u0648\u06cc\u062f\u06cc\u0648)<\/p>\n<p>ABAC\u060c \u06a9\u0646\u062a\u0631\u0644 \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u0628\u062a\u0646\u06cc \u0628\u0631 \u0648\u06cc\u0698\u06af\u06cc\u060c \u06cc\u06a9 \u067e\u0627\u0631\u0627\u062f\u0627\u06cc\u0645 \u06a9\u0646\u062a\u0631\u0644 \u062f\u0633\u062a\u0631\u0633\u06cc \u0631\u0627 \u062a\u0639\u0631\u06cc\u0641 \u0645\u06cc \u06a9\u0646\u062f \u06a9\u0647 \u0628\u0647 \u0645\u0648\u062c\u0628 \u0622\u0646 \u062d\u0642\u0648\u0642 \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0633\u06cc\u0627\u0633\u062a \u0647\u0627\u06cc\u06cc \u06a9\u0647 \u0648\u06cc\u0698\u06af\u06cc \u0647\u0627 \u0631\u0627 \u0628\u0627 \u0647\u0645 \u062a\u0631\u06a9\u06cc\u0628 \u0645\u06cc \u06a9\u0646\u0646\u062f \u0628\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0627\u0639\u0637\u0627 \u0645\u06cc \u0634\u0648\u062f.<\/p>\n<p>RBAC\u060c \u06a9\u0646\u062a\u0631\u0644 \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u0628\u062a\u0646\u06cc \u0628\u0631 \u0646\u0642\u0634\u060c \u0631\u0648\u0634\u06cc \u0628\u0631\u0627\u06cc \u062a\u0646\u0638\u06cc\u0645 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0631\u0627\u06cc\u0627\u0646\u0647 \u06cc\u0627 \u0645\u0646\u0627\u0628\u0639 \u0634\u0628\u06a9\u0647 \u0628\u0631 \u0627\u0633\u0627\u0633 \u0646\u0642\u0634 \u062a\u06a9 \u062a\u06a9 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062f\u0631 \u0633\u0627\u0632\u0645\u0627\u0646 \u0634\u0645\u0627 \u0627\u0633\u062a. \u0645\u0646\u0628\u0639<\/p>\n<p>\u06af\u0631\u0647 \u0645\u062c\u0648\u0632 \u06cc\u06a9 \u062d\u0627\u0644\u062a \u0645\u062c\u0648\u0632 \u0628\u0627 \u0647\u062f\u0641 \u0648\u06cc\u0698\u0647 \u0627\u0633\u062a \u06a9\u0647 \u0628\u0647 \u0637\u0648\u0631 \u062e\u0627\u0635 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0647\u0627\u06cc API \u0627\u0631\u0627\u0626\u0647 \u0634\u062f\u0647 \u062a\u0648\u0633\u0637 kubelets.source \u0631\u0627 \u0645\u062c\u0627\u0632 \u0645\u06cc \u06a9\u0646\u062f.<\/p>\n<p>\u0622 \u0648\u0628 \u0647\u0648\u06a9 \u06cc\u06a9 \u067e\u0627\u0633\u062e \u062a\u0645\u0627\u0633 HTTP \u0627\u0633\u062a: \u06cc\u06a9 HTTP POST \u06a9\u0647 \u0632\u0645\u0627\u0646\u06cc \u0627\u062a\u0641\u0627\u0642 \u0645\u06cc \u0627\u0641\u062a\u062f \u06a9\u0647 \u0627\u062a\u0641\u0627\u0642\u06cc \u0645\u06cc \u0627\u0641\u062a\u062f.  \u06cc\u06a9 \u0627\u0639\u0644\u0627\u0646 \u0631\u0648\u06cc\u062f\u0627\u062f \u0633\u0627\u062f\u0647 \u0627\u0632 \u0637\u0631\u06cc\u0642 HTTP POST.  \u06cc\u06a9 \u0628\u0631\u0646\u0627\u0645\u0647 \u0648\u0628 \u06a9\u0647 WebHooks \u0631\u0627 \u067e\u06cc\u0627\u062f\u0647\u200c\u0633\u0627\u0632\u06cc \u0645\u06cc\u200c\u06a9\u0646\u062f\u060c \u0647\u0646\u06af\u0627\u0645\u06cc \u06a9\u0647 \u0645\u0648\u0627\u0631\u062f \u062e\u0627\u0635\u06cc \u0627\u062a\u0641\u0627\u0642 \u0645\u06cc\u200c\u0627\u0641\u062a\u062f\u060c \u067e\u06cc\u0627\u0645\u06cc \u0631\u0627 \u0628\u0647 URL \u0627\u0631\u0633\u0627\u0644 \u0645\u06cc\u200c\u06a9\u0646\u062f.\u0648\u0642\u062a\u06cc \u0645\u0634\u062e\u0635 \u0634\u062f\u060c \u062d\u0627\u0644\u062a Webhook \u0628\u0627\u0639\u062b \u0645\u06cc \u0634\u0648\u062f \u06a9\u0647 Kubernetes \u062f\u0631 \u0647\u0646\u06af\u0627\u0645 \u062a\u0639\u06cc\u06cc\u0646 user privileges.source \u0627\u0632 \u06cc\u06a9 \u0633\u0631\u0648\u06cc\u0633 REST \u062e\u0627\u0631\u062c \u067e\u0631\u0633 \u0648 \u062c\u0648 \u06a9\u0646\u062f<\/p>\n<p>\u0647\u0645\u0627\u0646\u0637\u0648\u0631 \u06a9\u0647 \u0645\u0627 \u0627\u0632 a \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc \u06a9\u0646\u06cc\u0645 kind \u062e\u0648\u0634\u0647\u060c \u0645\u0627 \u0646\u0645\u06cc \u062a\u0648\u0627\u0646\u06cc\u0645 \u0628\u0647 \u06af\u0631\u0647 \u062e\u0648\u062f ssh \u06a9\u0646\u06cc\u0645\u060c \u0632\u06cc\u0631\u0627 \u06cc\u06a9 \u0638\u0631\u0641 \u062f\u0627\u06a9\u0631 \u0627\u0633\u062a.  \u0628\u0646\u0627\u0628\u0631\u0627\u06cc\u0646 \u0645\u0627 \u0645\u06cc \u062a\u0648\u0627\u0646\u06cc\u0645 \u0622\u0646 \u0631\u0627 \u0627\u062f\u0627\u0631\u0647 \u06a9\u0646\u06cc\u0645 exec \u0641\u0631\u0645\u0627\u0646<\/p>\n<p>root@localhost:~# docker ps | grep control-plane<br \/>\nf791fa85c269   kindest\/node:v1.30.0   &#8220;\/usr\/local\/bin\/entr\u2026&#8221;   3 weeks ago    Up 11 hours   0.0.0.0:30001-&gt;30001\/tcp, 127.0.0.1:39283-&gt;6443\/tcp                                            lucky-luke-control-plane<br \/>\nroot@localhost:~# docker exec -it lucky-luke-control-plane bash<br \/>\nroot@lucky-luke-control-plane:\/# cd \/etc\/kubernetes\/manifests\/<br \/>\nroot@lucky-luke-control-plane:\/etc\/kubernetes\/manifests# ls -l<br \/>\ntotal 16<br \/>\n-rw&#8212;&#8212;- 1 root root 2418 Jul 23 06:26 etcd.yaml<br \/>\n-rw&#8212;&#8212;- 1 root root 3896 Jul 23 06:26 kube-apiserver.yaml<br \/>\n-rw&#8212;&#8212;- 1 root root 3434 Jul 23 06:26 kube-controller-manager.yaml<br \/>\n-rw&#8212;&#8212;- 1 root root 1463 Jul 23 06:26 kube-scheduler.yaml<\/p>\n<p>    \u0648\u0627\u0631\u062f \u062d\u0627\u0644\u062a \u062a\u0645\u0627\u0645 \u0635\u0641\u062d\u0647 \u0634\u0648\u06cc\u062f<\/p>\n<p>    \u0627\u0632 \u062d\u0627\u0644\u062a \u062a\u0645\u0627\u0645 \u0635\u0641\u062d\u0647 \u062e\u0627\u0631\u062c \u0634\u0648\u06cc\u062f<\/p>\n<p>\u0627\u06af\u0631 \u0628\u0628\u06cc\u0646\u06cc\u0645 kube-apiserver.yaml \u0641\u0627\u06cc\u0644\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u0645 \u06af\u0632\u06cc\u0646\u0647\u200c\u0647\u0627\u06cc \u0632\u06cc\u0627\u062f\u06cc \u0631\u0627 \u0628\u0628\u06cc\u0646\u06cc\u0645 \u06a9\u0647 \u0628\u0631\u0627\u06cc \u0634\u0631\u0648\u0639 \u0641\u0631\u0645\u0627\u0646 \u0633\u0631\u0648\u06cc\u0633 \u0639\u0628\u0648\u0631 \u06a9\u0631\u062f\u0647\u200c\u0627\u0646\u062f\u060c \u0645\u0627\u0646\u0646\u062f:<\/p>\n<p>&#8230;<br \/>\nspec:<br \/>\n  containers:<br \/>\n  &#8211; command:<br \/>\n    &#8211; kube-apiserver<br \/>\n    &#8211; &#8211;advertise-address=172.19.0.4<br \/>\n    &#8211; &#8211;allow-privileged=true<br \/>\n    &#8211; &#8211;authorization-mode=Node,RBAC<br \/>\n&#8230;<\/p>\n<p>    \u0648\u0627\u0631\u062f \u062d\u0627\u0644\u062a \u062a\u0645\u0627\u0645 \u0635\u0641\u062d\u0647 \u0634\u0648\u06cc\u062f<\/p>\n<p>    \u0627\u0632 \u062d\u0627\u0644\u062a \u062a\u0645\u0627\u0645 \u0635\u0641\u062d\u0647 \u062e\u0627\u0631\u062c \u0634\u0648\u06cc\u062f<\/p>\n<p>\u0631\u0627 authorization-mode \u0627\u0633\u062a Node \u0648 RBAC.\u062a\u0648\u062c\u0647 \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u06cc\u062f \u067e\u06cc\u0634 \u0641\u0631\u0636 \u0628\u0647 AlwaysAllow \u0627\u06af\u0631 &#8211;authorization-config \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0646\u0645\u06cc \u0634\u0648\u062f. \u062f\u0631 \u0627\u06cc\u0646\u062c\u0627 \u0628\u0631\u0627\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0628\u06cc\u0634\u062a\u0631 \u062f\u0631 \u0645\u0648\u0631\u062f \u06af\u0632\u06cc\u0646\u0647 \u0647\u0627\u06cc \u062f\u06cc\u06af\u0631.<\/p>\n<p>\u062f\u0627\u06cc\u0631\u06a9\u062a\u0648\u0631\u06cc \u067e\u06cc\u0634 \u0641\u0631\u0636 \u0647\u0645\u0647 \u06af\u0648\u0627\u0647\u06cc \u06a9\u0647 \u062a\u0648\u0633\u0637 kube-apiserver \u0627\u0633\u062a:<\/p>\n<p>root@lucky-luke-control-plane:~# ls -l \/etc\/kubernetes\/pki\/<br \/>\ntotal 60<br \/>\n-rw-r&#8211;r&#8211; 1 root root 1123 Jul  1 16:16 apiserver-etcd-client.crt<br \/>\n-rw&#8212;&#8212;- 1 root root 1675 Jul  1 16:16 apiserver-etcd-client.key<br \/>\n-rw-r&#8211;r&#8211; 1 root root 1176 Jul  1 16:16 apiserver-kubelet-client.crt<br \/>\n-rw&#8212;&#8212;- 1 root root 1679 Jul  1 16:16 apiserver-kubelet-client.key<br \/>\n-rw-r&#8211;r&#8211; 1 root root 1334 Jul 23 06:26 apiserver.crt<br \/>\n-rw&#8212;&#8212;- 1 root root 1675 Jul 23 06:26 apiserver.key<br \/>\n-rw-r&#8211;r&#8211; 1 root root 1107 Jul  1 16:16 ca.crt<br \/>\n-rw&#8212;&#8212;- 1 root root 1675 Jul  1 16:16 ca.key<br \/>\ndrwxr-xr-x 2 root root 4096 Jul  1 16:16 etcd<br \/>\n-rw-r&#8211;r&#8211; 1 root root 1123 Jul  1 16:16 front-proxy-ca.crt<br \/>\n-rw&#8212;&#8212;- 1 root root 1679 Jul  1 16:16 front-proxy-ca.key<br \/>\n-rw-r&#8211;r&#8211; 1 root root 1119 Jul  1 16:16 front-proxy-client.crt<br \/>\n-rw&#8212;&#8212;- 1 root root 1675 Jul  1 16:16 front-proxy-client.key<br \/>\n-rw&#8212;&#8212;- 1 root root 1679 Jul  1 16:16 sa.key<br \/>\n-rw&#8212;&#8212;- 1 root root  451 Jul  1 16:16 sa.pub<\/p>\n<p>    \u0648\u0627\u0631\u062f \u062d\u0627\u0644\u062a \u062a\u0645\u0627\u0645 \u0635\u0641\u062d\u0647 \u0634\u0648\u06cc\u062f<\/p>\n<p>    \u0627\u0632 \u062d\u0627\u0644\u062a \u062a\u0645\u0627\u0645 \u0635\u0641\u062d\u0647 \u062e\u0627\u0631\u062c \u0634\u0648\u06cc\u062f<\/p>\n<p>\u0686\u0646\u062f\u06cc\u0646 \u062c\u0641\u062a \u06af\u0648\u0627\u0647\u06cc \u0648 \u06a9\u0644\u06cc\u062f \u0628\u0631\u0627\u06cc \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f apiserver\u060c \u0632\u06cc\u0631\u0627 \u06af\u0627\u0647\u06cc \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u06cc\u06a9 \u0633\u0631\u0648\u0631 \u0648 \u06af\u0627\u0647\u06cc \u0645\u0627\u0646\u0646\u062f \u06cc\u06a9 \u06a9\u0644\u0627\u06cc\u0646\u062a \u0639\u0645\u0644 \u0645\u06cc \u06a9\u0646\u062f.<\/p>\n<div data-article-id=\"1933659\" id=\"article-body\">\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_84 counter-hierarchy ez-toc-counter-rtl ez-toc-grey ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">\u0641\u0647\u0631\u0633\u062a \u0645\u0637\u0627\u0644\u0628<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"Toggle Table of Content\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/nabfollower.com\/blog\/40-days-of-kubernetes-2240-533j\/#%D8%B1%D9%88%D8%B2_2240\" >\u0631\u0648\u0632 22\/40<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/nabfollower.com\/blog\/40-days-of-kubernetes-2240-533j\/#%D8%A7%D8%AD%D8%B1%D8%A7%D8%B2_%D9%87%D9%88%DB%8C%D8%AA_%DA%86%DB%8C%D8%B3%D8%AA_%D9%88_%D9%85%D8%AC%D9%88%D8%B2_%DA%86%DB%8C%D8%B3%D8%AA\" >\u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0686\u06cc\u0633\u062a \u0648 \u0645\u062c\u0648\u0632 \u0686\u06cc\u0633\u062a<\/a><\/li><\/ul><\/li><\/ul><\/nav><\/div>\n<h2><span class=\"ez-toc-section\" id=\"%D8%B1%D9%88%D8%B2_2240\"><\/span>\n<p>  \u0631\u0648\u0632 22\/40<br \/>\n<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>\u0644\u06cc\u0646\u06a9 \u0648\u06cc\u062f\u06cc\u0648<br \/>@piyushsachdeva <br \/>\u0645\u062e\u0632\u0646 \u06af\u06cc\u062a<br \/>\u0645\u0646 Git Repo<\/p>\n<p>\u0645\u0627 \u0646\u06af\u0627\u0647 \u0645\u06cc \u06a9\u0646\u06cc\u0645 <code>authorization<\/code>\u060c <code>kubeconfig<\/code> \u0648 \u0628\u0631\u062e\u06cc \u0645\u0641\u0627\u0647\u06cc\u0645 \u062f\u06cc\u06af\u0631<br \/>\u062f\u0631 \u0648\u0627\u0642\u0639 \u0648\u0642\u062a\u06cc \u0641\u0631\u0645\u0627\u0646 \u0631\u0627 \u0627\u062c\u0631\u0627 \u0645\u06cc \u06a9\u0646\u06cc\u062f <code>kubectl get pods<\/code>\u060c \u0642\u0628\u0644 \u0627\u0632 \u0627\u06cc\u0646\u06a9\u0647 \u0628\u0647 \u0646\u062a\u06cc\u062c\u0647 \u0628\u0631\u0633\u06cc\u062f\u060c \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0645\u06cc \u0634\u0648\u06cc\u062f \u0648 \u0628\u0631\u0631\u0633\u06cc \u0645\u06cc \u06a9\u0646\u06cc\u062f \u06a9\u0647 \u0622\u06cc\u0627 \u0645\u062c\u0627\u0632 \u0647\u0633\u062a\u06cc\u062f \u0648 \u0627\u062c\u0627\u0632\u0647 \u0627\u062c\u0631\u0627\u06cc \u0627\u06cc\u0646 \u062f\u0633\u062a\u0648\u0631 \u0631\u0627 \u062f\u0631 \u06cc\u06a9 <code>kubernetes<\/code> \u062e\u0648\u0634\u0647.<\/p>\n<p>\u0627\u0632 \u0622\u0646\u062c\u0627\u06cc\u06cc \u06a9\u0647 \u062f\u0631 \u067e\u0633\u200c\u0632\u0645\u06cc\u0646\u0647\u060c \u0628\u0631\u062e\u06cc \u0627\u0632 \u062f\u0627\u062f\u0647\u200c\u0647\u0627 \u0628\u0647 \u062e\u0648\u0634\u0647 \u0627\u0631\u0633\u0627\u0644 \u0645\u06cc\u200c\u0634\u0648\u0646\u062f\u060c \u0634\u0645\u0627 \u0645\u062c\u0627\u0632 \u0628\u0647 \u0627\u062c\u0631\u0627\u06cc \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u062f\u0631 \u06cc\u06a9 \u062e\u0648\u0634\u0647 \u0647\u0633\u062a\u06cc\u062f \u06cc\u0627 \u0646\u06cc\u0633\u062a\u06cc\u062f.<br \/>\u0645\u0627 \u0627\u06cc\u0646 \u06af\u0632\u06cc\u0646\u0647 \u0647\u0627 \u0631\u0627 \u0628\u0627 \u06cc\u06a9 \u0641\u0627\u06cc\u0644 \u06a9\u0627\u0646\u0641\u06cc\u06af \u0628\u0647 \u0646\u0627\u0645 \u0627\u0631\u0633\u0627\u0644 \u0645\u06cc \u06a9\u0646\u06cc\u0645 <code>kubeconfig<\/code>.<\/p>\n<p>\u062f\u0633\u062a\u0648\u0631 \u0648\u0627\u0642\u0639\u06cc \u0628\u0647 \u0627\u06cc\u0646 \u0635\u0648\u0631\u062a \u0627\u0633\u062a:<\/p>\n<div class=\"highlight js-code-highlight\">\n<pre class=\"highlight shell\"><code>root@localhost:~# kubectl get nodes <span class=\"nt\">--kubeconfig<\/span> .kube\/config\nNAME                       STATUS   ROLES           AGE   VERSION\nlucky-luke-control-plane   Ready    control-plane   22d   v1.30.0\nlucky-luke-worker          Ready    <none>          22d   v1.30.0\nlucky-luke-worker2         Ready    <none>          22d   v1.30.0\n<\/none><\/none><\/code><\/pre>\n<div class=\"highlight__panel js-actions-panel\">\n<div class=\"highlight__panel-action js-fullscreen-code-action\">\n    <svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"20px\" height=\"20px\" viewbox=\"0 0 24 24\" class=\"highlight-action crayons-icon highlight-action--fullscreen-on\"><title>\u0648\u0627\u0631\u062f \u062d\u0627\u0644\u062a \u062a\u0645\u0627\u0645 \u0635\u0641\u062d\u0647 \u0634\u0648\u06cc\u062f<\/title>\n    <path d=\"M16 3h6v6h-2V5h-4V3zM2 3h6v2H4v4H2V3zm18 16v-4h2v6h-6v-2h4zM4 19h4v2H2v-6h2v4z\"\/>\n<\/svg><\/p>\n<p>    <svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"20px\" height=\"20px\" viewbox=\"0 0 24 24\" class=\"highlight-action crayons-icon highlight-action--fullscreen-off\"><title>\u0627\u0632 \u062d\u0627\u0644\u062a \u062a\u0645\u0627\u0645 \u0635\u0641\u062d\u0647 \u062e\u0627\u0631\u062c \u0634\u0648\u06cc\u062f<\/title>\n    <path d=\"M18 7h4v2h-6V3h2v4zM8 9H2V7h4V3h2v6zm10 8v4h-2v-6h6v2h-4zM8 15v6H6v-4H2v-2h6z\"\/>\n<\/svg><\/p>\n<\/div>\n<\/div>\n<\/div>\n<p>\u062c\u0632\u0626\u06cc\u0627\u062a \u062f\u0631 <code>kubeconfig<\/code> \u0641\u0627\u06cc\u0644 \u0634\u0627\u0645\u0644:<\/p>\n<ul>\n<li>\u06af\u0648\u0627\u0647\u06cc-\u0645\u0631\u062c\u0639-\u062f\u0627\u062f\u0647<\/li>\n<li>\u0633\u0631\u0648\u0631<\/li>\n<li>\u0632\u0645\u06cc\u0646\u0647 \u0647\u0627<\/li>\n<li>\u06a9\u0644\u0627\u06cc\u0646\u062a-\u06a9\u0644\u06cc\u062f-\u062f\u0627\u062f\u0647 \u0648 \u063a\u06cc\u0631\u0647.  \u0631\u0627 <code>context<\/code> \u0686\u06cc\u0632\u06cc \u0646\u06cc\u0633\u062a \u062c\u0632 \u062a\u0631\u06a9\u06cc\u0628\u06cc \u0627\u0632 <code>user<\/code> \u0648 <code>cluster<\/code>.<br \/>\n<br \/>\n(\u0639\u06a9\u0633 \u0627\u0632 \u0648\u06cc\u062f\u06cc\u0648)\n<\/li>\n<\/ul>\n<div class=\"highlight js-code-highlight\">\n<pre class=\"highlight yaml\"><code><span class=\"nn\">...<\/span>\n<span class=\"na\">contexts<\/span><span class=\"pi\">:<\/span>\n<span class=\"pi\">-<\/span> <span class=\"na\">context<\/span><span class=\"pi\">:<\/span>\n    <span class=\"na\">cluster<\/span><span class=\"pi\">:<\/span> <span class=\"s\">kind-lucky-luke<\/span>\n    <span class=\"na\">user<\/span><span class=\"pi\">:<\/span> <span class=\"s\">kind-lucky-luke<\/span>\n  <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">kind-lucky-luke<\/span>\n<span class=\"nn\">...<\/span>\n<\/code><\/pre>\n<div class=\"highlight__panel js-actions-panel\">\n<div class=\"highlight__panel-action js-fullscreen-code-action\">\n    <svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"20px\" height=\"20px\" viewbox=\"0 0 24 24\" class=\"highlight-action crayons-icon highlight-action--fullscreen-on\"><title>\u0648\u0627\u0631\u062f \u062d\u0627\u0644\u062a \u062a\u0645\u0627\u0645 \u0635\u0641\u062d\u0647 \u0634\u0648\u06cc\u062f<\/title>\n    <path d=\"M16 3h6v6h-2V5h-4V3zM2 3h6v2H4v4H2V3zm18 16v-4h2v6h-6v-2h4zM4 19h4v2H2v-6h2v4z\"\/>\n<\/svg><\/p>\n<p>    <svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"20px\" height=\"20px\" viewbox=\"0 0 24 24\" class=\"highlight-action crayons-icon highlight-action--fullscreen-off\"><title>\u0627\u0632 \u062d\u0627\u0644\u062a \u062a\u0645\u0627\u0645 \u0635\u0641\u062d\u0647 \u062e\u0627\u0631\u062c \u0634\u0648\u06cc\u062f<\/title>\n    <path d=\"M18 7h4v2h-6V3h2v4zM8 9H2V7h4V3h2v6zm10 8v4h-2v-6h6v2h-4zM8 15v6H6v-4H2v-2h6z\"\/>\n<\/svg><\/p>\n<\/div>\n<\/div>\n<\/div>\n<h3><span class=\"ez-toc-section\" id=\"%D8%A7%D8%AD%D8%B1%D8%A7%D8%B2_%D9%87%D9%88%DB%8C%D8%AA_%DA%86%DB%8C%D8%B3%D8%AA_%D9%88_%D9%85%D8%AC%D9%88%D8%B2_%DA%86%DB%8C%D8%B3%D8%AA\"><\/span>\n<p>  \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0686\u06cc\u0633\u062a \u0648 \u0645\u062c\u0648\u0632 \u0686\u06cc\u0633\u062a<br \/>\n<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><img decoding=\"async\" src=\"https:\/\/media.dev.to\/cdn-cgi\/image\/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto\/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2Frlqno4jby3sy9ghz4u6s.png\" alt=\"\u062a\u0648\u0636\u06cc\u062d\u0627\u062a \u062a\u0635\u0648\u06cc\u0631\" loading=\"lazy\" width=\"541\" height=\"225\" title=\"\"><br \/>(\u0639\u06a9\u0633 \u0627\u0632 \u0648\u06cc\u062f\u06cc\u0648)<\/p>\n<p><strong>ABAC<\/strong>\u060c \u06a9\u0646\u062a\u0631\u0644 \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u0628\u062a\u0646\u06cc \u0628\u0631 \u0648\u06cc\u0698\u06af\u06cc\u060c \u06cc\u06a9 \u067e\u0627\u0631\u0627\u062f\u0627\u06cc\u0645 \u06a9\u0646\u062a\u0631\u0644 \u062f\u0633\u062a\u0631\u0633\u06cc \u0631\u0627 \u062a\u0639\u0631\u06cc\u0641 \u0645\u06cc \u06a9\u0646\u062f \u06a9\u0647 \u0628\u0647 \u0645\u0648\u062c\u0628 \u0622\u0646 \u062d\u0642\u0648\u0642 \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0633\u06cc\u0627\u0633\u062a \u0647\u0627\u06cc\u06cc \u06a9\u0647 \u0648\u06cc\u0698\u06af\u06cc \u0647\u0627 \u0631\u0627 \u0628\u0627 \u0647\u0645 \u062a\u0631\u06a9\u06cc\u0628 \u0645\u06cc \u06a9\u0646\u0646\u062f \u0628\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0627\u0639\u0637\u0627 \u0645\u06cc \u0634\u0648\u062f.<\/p>\n<p><strong>RBAC<\/strong>\u060c \u06a9\u0646\u062a\u0631\u0644 \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u0628\u062a\u0646\u06cc \u0628\u0631 \u0646\u0642\u0634\u060c \u0631\u0648\u0634\u06cc \u0628\u0631\u0627\u06cc \u062a\u0646\u0638\u06cc\u0645 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0631\u0627\u06cc\u0627\u0646\u0647 \u06cc\u0627 \u0645\u0646\u0627\u0628\u0639 \u0634\u0628\u06a9\u0647 \u0628\u0631 \u0627\u0633\u0627\u0633 \u0646\u0642\u0634 \u062a\u06a9 \u062a\u06a9 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062f\u0631 \u0633\u0627\u0632\u0645\u0627\u0646 \u0634\u0645\u0627 \u0627\u0633\u062a. \u0645\u0646\u0628\u0639<\/p>\n<p><strong>\u06af\u0631\u0647<\/strong> \u0645\u062c\u0648\u0632 \u06cc\u06a9 \u062d\u0627\u0644\u062a \u0645\u062c\u0648\u0632 \u0628\u0627 \u0647\u062f\u0641 \u0648\u06cc\u0698\u0647 \u0627\u0633\u062a \u06a9\u0647 \u0628\u0647 \u0637\u0648\u0631 \u062e\u0627\u0635 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0647\u0627\u06cc API \u0627\u0631\u0627\u0626\u0647 \u0634\u062f\u0647 \u062a\u0648\u0633\u0637 kubelets.source \u0631\u0627 \u0645\u062c\u0627\u0632 \u0645\u06cc \u06a9\u0646\u062f.<\/p>\n<p>\u0622 <strong>\u0648\u0628 \u0647\u0648\u06a9<\/strong> \u06cc\u06a9 \u067e\u0627\u0633\u062e \u062a\u0645\u0627\u0633 HTTP \u0627\u0633\u062a: \u06cc\u06a9 HTTP POST \u06a9\u0647 \u0632\u0645\u0627\u0646\u06cc \u0627\u062a\u0641\u0627\u0642 \u0645\u06cc \u0627\u0641\u062a\u062f \u06a9\u0647 \u0627\u062a\u0641\u0627\u0642\u06cc \u0645\u06cc \u0627\u0641\u062a\u062f.  \u06cc\u06a9 \u0627\u0639\u0644\u0627\u0646 \u0631\u0648\u06cc\u062f\u0627\u062f \u0633\u0627\u062f\u0647 \u0627\u0632 \u0637\u0631\u06cc\u0642 HTTP POST.  \u06cc\u06a9 \u0628\u0631\u0646\u0627\u0645\u0647 \u0648\u0628 \u06a9\u0647 WebHooks \u0631\u0627 \u067e\u06cc\u0627\u062f\u0647\u200c\u0633\u0627\u0632\u06cc \u0645\u06cc\u200c\u06a9\u0646\u062f\u060c \u0647\u0646\u06af\u0627\u0645\u06cc \u06a9\u0647 \u0645\u0648\u0627\u0631\u062f \u062e\u0627\u0635\u06cc \u0627\u062a\u0641\u0627\u0642 \u0645\u06cc\u200c\u0627\u0641\u062a\u062f\u060c \u067e\u06cc\u0627\u0645\u06cc \u0631\u0627 \u0628\u0647 URL \u0627\u0631\u0633\u0627\u0644 \u0645\u06cc\u200c\u06a9\u0646\u062f.<br \/>\u0648\u0642\u062a\u06cc \u0645\u0634\u062e\u0635 \u0634\u062f\u060c \u062d\u0627\u0644\u062a <code>Webhook<\/code> \u0628\u0627\u0639\u062b \u0645\u06cc \u0634\u0648\u062f \u06a9\u0647 Kubernetes \u062f\u0631 \u0647\u0646\u06af\u0627\u0645 \u062a\u0639\u06cc\u06cc\u0646 user privileges.source \u0627\u0632 \u06cc\u06a9 \u0633\u0631\u0648\u06cc\u0633 REST \u062e\u0627\u0631\u062c \u067e\u0631\u0633 \u0648 \u062c\u0648 \u06a9\u0646\u062f<\/p>\n<hr\/>\n<p>\u0647\u0645\u0627\u0646\u0637\u0648\u0631 \u06a9\u0647 \u0645\u0627 \u0627\u0632 a \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc \u06a9\u0646\u06cc\u0645 <code>kind<\/code> \u062e\u0648\u0634\u0647\u060c \u0645\u0627 \u0646\u0645\u06cc \u062a\u0648\u0627\u0646\u06cc\u0645 \u0628\u0647 \u06af\u0631\u0647 \u062e\u0648\u062f ssh \u06a9\u0646\u06cc\u0645\u060c \u0632\u06cc\u0631\u0627 \u06cc\u06a9 \u0638\u0631\u0641 \u062f\u0627\u06a9\u0631 \u0627\u0633\u062a.  \u0628\u0646\u0627\u0628\u0631\u0627\u06cc\u0646 \u0645\u0627 \u0645\u06cc \u062a\u0648\u0627\u0646\u06cc\u0645 \u0622\u0646 \u0631\u0627 \u0627\u062f\u0627\u0631\u0647 \u06a9\u0646\u06cc\u0645 <code>exec<\/code> \u0641\u0631\u0645\u0627\u0646<\/p>\n<div class=\"highlight js-code-highlight\">\n<pre class=\"highlight console\"><code><span class=\"gp\">root@localhost:~#<\/span><span class=\"w\"> <\/span>docker ps | <span class=\"nb\">grep <\/span>control-plane\n<span class=\"gp\">f791fa85c269   kindest\/node:v1.30.0   \"\/usr\/local\/bin\/entr\u2026\"   3 weeks ago    Up 11 hours   0.0.0.0:30001-&gt;<\/span>30001\/tcp, 127.0.0.1:39283-&gt;6443\/tcp                                            lucky-luke-control-plane\n<span class=\"gp\">root@localhost:~#<\/span><span class=\"w\"> <\/span>docker <span class=\"nb\">exec<\/span> <span class=\"nt\">-it<\/span> lucky-luke-control-plane bash\n<span class=\"gp\">root@lucky-luke-control-plane:\/#<\/span><span class=\"w\"> <\/span><span class=\"nb\">cd<\/span> \/etc\/kubernetes\/manifests\/\n<span class=\"gp\">root@lucky-luke-control-plane:\/etc\/kubernetes\/manifests#<\/span><span class=\"w\"> <\/span><span class=\"nb\">ls<\/span> <span class=\"nt\">-l<\/span>\n<span class=\"go\">total 16\n-rw------- 1 root root 2418 Jul 23 06:26 etcd.yaml\n-rw------- 1 root root 3896 Jul 23 06:26 kube-apiserver.yaml\n-rw------- 1 root root 3434 Jul 23 06:26 kube-controller-manager.yaml\n-rw------- 1 root root 1463 Jul 23 06:26 kube-scheduler.yaml\n<\/span><\/code><\/pre>\n<div class=\"highlight__panel js-actions-panel\">\n<div class=\"highlight__panel-action js-fullscreen-code-action\">\n    <svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"20px\" height=\"20px\" viewbox=\"0 0 24 24\" class=\"highlight-action crayons-icon highlight-action--fullscreen-on\"><title>\u0648\u0627\u0631\u062f \u062d\u0627\u0644\u062a \u062a\u0645\u0627\u0645 \u0635\u0641\u062d\u0647 \u0634\u0648\u06cc\u062f<\/title>\n    <path d=\"M16 3h6v6h-2V5h-4V3zM2 3h6v2H4v4H2V3zm18 16v-4h2v6h-6v-2h4zM4 19h4v2H2v-6h2v4z\"\/>\n<\/svg><\/p>\n<p>    <svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"20px\" height=\"20px\" viewbox=\"0 0 24 24\" class=\"highlight-action crayons-icon highlight-action--fullscreen-off\"><title>\u0627\u0632 \u062d\u0627\u0644\u062a \u062a\u0645\u0627\u0645 \u0635\u0641\u062d\u0647 \u062e\u0627\u0631\u062c \u0634\u0648\u06cc\u062f<\/title>\n    <path d=\"M18 7h4v2h-6V3h2v4zM8 9H2V7h4V3h2v6zm10 8v4h-2v-6h6v2h-4zM8 15v6H6v-4H2v-2h6z\"\/>\n<\/svg><\/p>\n<\/div>\n<\/div>\n<\/div>\n<p>\u0627\u06af\u0631 \u0628\u0628\u06cc\u0646\u06cc\u0645 <code>kube-apiserver.yaml<\/code> \u0641\u0627\u06cc\u0644\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u0645 \u06af\u0632\u06cc\u0646\u0647\u200c\u0647\u0627\u06cc \u0632\u06cc\u0627\u062f\u06cc \u0631\u0627 \u0628\u0628\u06cc\u0646\u06cc\u0645 \u06a9\u0647 \u0628\u0631\u0627\u06cc \u0634\u0631\u0648\u0639 \u0641\u0631\u0645\u0627\u0646 \u0633\u0631\u0648\u06cc\u0633 \u0639\u0628\u0648\u0631 \u06a9\u0631\u062f\u0647\u200c\u0627\u0646\u062f\u060c \u0645\u0627\u0646\u0646\u062f:<\/p>\n<div class=\"highlight js-code-highlight\">\n<pre class=\"highlight yaml\"><code><span class=\"nn\">...<\/span>\n<span class=\"na\">spec<\/span><span class=\"pi\">:<\/span>\n  <span class=\"na\">containers<\/span><span class=\"pi\">:<\/span>\n  <span class=\"pi\">-<\/span> <span class=\"na\">command<\/span><span class=\"pi\">:<\/span>\n    <span class=\"pi\">-<\/span> <span class=\"s\">kube-apiserver<\/span>\n    <span class=\"pi\">-<\/span> <span class=\"s\">--advertise-address=172.19.0.4<\/span>\n    <span class=\"pi\">-<\/span> <span class=\"s\">--allow-privileged=true<\/span>\n    <span class=\"pi\">-<\/span> <span class=\"s\">--authorization-mode=Node,RBAC<\/span>\n<span class=\"nn\">...<\/span>\n<\/code><\/pre>\n<div class=\"highlight__panel js-actions-panel\">\n<div class=\"highlight__panel-action js-fullscreen-code-action\">\n    <svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"20px\" height=\"20px\" viewbox=\"0 0 24 24\" class=\"highlight-action crayons-icon highlight-action--fullscreen-on\"><title>\u0648\u0627\u0631\u062f \u062d\u0627\u0644\u062a \u062a\u0645\u0627\u0645 \u0635\u0641\u062d\u0647 \u0634\u0648\u06cc\u062f<\/title>\n    <path d=\"M16 3h6v6h-2V5h-4V3zM2 3h6v2H4v4H2V3zm18 16v-4h2v6h-6v-2h4zM4 19h4v2H2v-6h2v4z\"\/>\n<\/svg><\/p>\n<p>    <svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"20px\" height=\"20px\" viewbox=\"0 0 24 24\" class=\"highlight-action crayons-icon highlight-action--fullscreen-off\"><title>\u0627\u0632 \u062d\u0627\u0644\u062a \u062a\u0645\u0627\u0645 \u0635\u0641\u062d\u0647 \u062e\u0627\u0631\u062c \u0634\u0648\u06cc\u062f<\/title>\n    <path d=\"M18 7h4v2h-6V3h2v4zM8 9H2V7h4V3h2v6zm10 8v4h-2v-6h6v2h-4zM8 15v6H6v-4H2v-2h6z\"\/>\n<\/svg><\/p>\n<\/div>\n<\/div>\n<\/div>\n<p>\u0631\u0627 <code>authorization-mode<\/code> \u0627\u0633\u062a <code>Node<\/code> \u0648 <code>RBAC<\/code>.<br \/><strong>\u062a\u0648\u062c\u0647 \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u06cc\u062f<\/strong> \u067e\u06cc\u0634 \u0641\u0631\u0636 \u0628\u0647 <code>AlwaysAllow<\/code> \u0627\u06af\u0631 <code>--authorization-config<\/code> \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0646\u0645\u06cc \u0634\u0648\u062f. <br \/>\u062f\u0631 \u0627\u06cc\u0646\u062c\u0627 \u0628\u0631\u0627\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0628\u06cc\u0634\u062a\u0631 \u062f\u0631 \u0645\u0648\u0631\u062f \u06af\u0632\u06cc\u0646\u0647 \u0647\u0627\u06cc \u062f\u06cc\u06af\u0631.<\/p>\n<hr\/>\n<p>\u062f\u0627\u06cc\u0631\u06a9\u062a\u0648\u0631\u06cc \u067e\u06cc\u0634 \u0641\u0631\u0636 \u0647\u0645\u0647 \u06af\u0648\u0627\u0647\u06cc \u06a9\u0647 \u062a\u0648\u0633\u0637 <code>kube-apiserver<\/code> \u0627\u0633\u062a:<\/p>\n<div class=\"highlight js-code-highlight\">\n<pre class=\"highlight console\"><code><span class=\"gp\">root@lucky-luke-control-plane:~#<\/span><span class=\"w\"> <\/span><span class=\"nb\">ls<\/span> <span class=\"nt\">-l<\/span> \/etc\/kubernetes\/pki\/\n<span class=\"go\">total 60\n-rw-r--r-- 1 root root 1123 Jul  1 16:16 apiserver-etcd-client.crt\n-rw------- 1 root root 1675 Jul  1 16:16 apiserver-etcd-client.key\n-rw-r--r-- 1 root root 1176 Jul  1 16:16 apiserver-kubelet-client.crt\n-rw------- 1 root root 1679 Jul  1 16:16 apiserver-kubelet-client.key\n-rw-r--r-- 1 root root 1334 Jul 23 06:26 apiserver.crt\n-rw------- 1 root root 1675 Jul 23 06:26 apiserver.key\n-rw-r--r-- 1 root root 1107 Jul  1 16:16 ca.crt\n-rw------- 1 root root 1675 Jul  1 16:16 ca.key\ndrwxr-xr-x 2 root root 4096 Jul  1 16:16 etcd\n-rw-r--r-- 1 root root 1123 Jul  1 16:16 front-proxy-ca.crt\n-rw------- 1 root root 1679 Jul  1 16:16 front-proxy-ca.key\n-rw-r--r-- 1 root root 1119 Jul  1 16:16 front-proxy-client.crt\n-rw------- 1 root root 1675 Jul  1 16:16 front-proxy-client.key\n-rw------- 1 root root 1679 Jul  1 16:16 sa.key\n-rw------- 1 root root  451 Jul  1 16:16 sa.pub\n<\/span><\/code><\/pre>\n<div class=\"highlight__panel js-actions-panel\">\n<div class=\"highlight__panel-action js-fullscreen-code-action\">\n    <svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"20px\" height=\"20px\" viewbox=\"0 0 24 24\" class=\"highlight-action crayons-icon highlight-action--fullscreen-on\"><title>\u0648\u0627\u0631\u062f \u062d\u0627\u0644\u062a \u062a\u0645\u0627\u0645 \u0635\u0641\u062d\u0647 \u0634\u0648\u06cc\u062f<\/title>\n    <path d=\"M16 3h6v6h-2V5h-4V3zM2 3h6v2H4v4H2V3zm18 16v-4h2v6h-6v-2h4zM4 19h4v2H2v-6h2v4z\"\/>\n<\/svg><\/p>\n<p>    <svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"20px\" height=\"20px\" viewbox=\"0 0 24 24\" class=\"highlight-action crayons-icon highlight-action--fullscreen-off\"><title>\u0627\u0632 \u062d\u0627\u0644\u062a \u062a\u0645\u0627\u0645 \u0635\u0641\u062d\u0647 \u062e\u0627\u0631\u062c \u0634\u0648\u06cc\u062f<\/title>\n    <path d=\"M18 7h4v2h-6V3h2v4zM8 9H2V7h4V3h2v6zm10 8v4h-2v-6h6v2h-4zM8 15v6H6v-4H2v-2h6z\"\/>\n<\/svg><\/p>\n<\/div>\n<\/div>\n<\/div>\n<p>\u0686\u0646\u062f\u06cc\u0646 \u062c\u0641\u062a \u06af\u0648\u0627\u0647\u06cc \u0648 \u06a9\u0644\u06cc\u062f \u0628\u0631\u0627\u06cc \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f <code>apiserver<\/code>\u060c \u0632\u06cc\u0631\u0627 \u06af\u0627\u0647\u06cc \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u06cc\u06a9 \u0633\u0631\u0648\u0631 \u0648 \u06af\u0627\u0647\u06cc \u0645\u0627\u0646\u0646\u062f \u06cc\u06a9 \u06a9\u0644\u0627\u06cc\u0646\u062a \u0639\u0645\u0644 \u0645\u06cc \u06a9\u0646\u062f.<\/p>\n<\/p><\/div>\n","protected":false},"excerpt":{"rendered":"<p>Summarize this content to 400 words in Persian Lang \u0631\u0648\u0632 22\/40 \u0644\u06cc\u0646\u06a9 \u0648\u06cc\u062f\u06cc\u0648@piyushsachdeva \u0645\u062e\u0632\u0646 \u06af\u06cc\u062a\u0645\u0646 Git Repo \u0645\u0627 \u0646\u06af\u0627\u0647 \u0645\u06cc \u06a9\u0646\u06cc\u0645 authorization\u060c kubeconfig \u0648 \u0628\u0631\u062e\u06cc \u0645\u0641\u0627\u0647\u06cc\u0645 \u062f\u06cc\u06af\u0631\u062f\u0631 \u0648\u0627\u0642\u0639 \u0648\u0642\u062a\u06cc \u0641\u0631\u0645\u0627\u0646 \u0631\u0627 \u0627\u062c\u0631\u0627 \u0645\u06cc \u06a9\u0646\u06cc\u062f kubectl get pods\u060c \u0642\u0628\u0644 \u0627\u0632 \u0627\u06cc\u0646\u06a9\u0647 \u0628\u0647 \u0646\u062a\u06cc\u062c\u0647 \u0628\u0631\u0633\u06cc\u062f\u060c \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0645\u06cc \u0634\u0648\u06cc\u062f \u0648 \u0628\u0631\u0631\u0633\u06cc \u0645\u06cc \u06a9\u0646\u06cc\u062f \u06a9\u0647 \u0622\u06cc\u0627 \u0645\u062c\u0627\u0632 \u0647\u0633\u062a\u06cc\u062f &hellip;<\/p>\n","protected":false},"author":2,"featured_media":70804,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"","fifu_image_alt":"","footnotes":""},"categories":[339],"tags":[],"class_list":["post-70803","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-dev"],"_links":{"self":[{"href":"https:\/\/nabfollower.com\/blog\/wp-json\/wp\/v2\/posts\/70803","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nabfollower.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nabfollower.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nabfollower.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/nabfollower.com\/blog\/wp-json\/wp\/v2\/comments?post=70803"}],"version-history":[{"count":0,"href":"https:\/\/nabfollower.com\/blog\/wp-json\/wp\/v2\/posts\/70803\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/nabfollower.com\/blog\/wp-json\/wp\/v2\/media\/70804"}],"wp:attachment":[{"href":"https:\/\/nabfollower.com\/blog\/wp-json\/wp\/v2\/media?parent=70803"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nabfollower.com\/blog\/wp-json\/wp\/v2\/categories?post=70803"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nabfollower.com\/blog\/wp-json\/wp\/v2\/tags?post=70803"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}