KUBERNETES(1) kubernetes KUBERNETES(1) (NAME) kubectl-create-token - (service account) (SYNOPSIS) kubectl create token [OPTIONS] (DESCRIPTION) (service account). (OPTIONS) --allow-missing-template-keys=true true (map key) . golang jsonpath . --audience=[] (audience) . Kubernetes API . . --bound-object-kind="" (Kind) (bind) . Node Pod Secret. --bound-object-name . --bound-object-name="" . . --bound-object-kind . --bound-object-uid="" (UID) . --bound-object-kind --bound-object-name . UID . --duration=0s . 0 . . -o, --output="" . : (json, yaml, kyaml, name, go-template, go-template- file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath- file). --show-managed-fields=false true managedFields JSON YAML . --template="" -o=go-template -o=go-template-file. golang [http://golang.org/pkg/text/template/#pkg-overview]. (OPTIONS INHERITED FROM PARENT COMMANDS) --as="" (impersonate) . (service account) namespace . --as-group=[] . --as-uid="" UID . --as-user-extra=[] . --cache-dir="/home/username/.kube/cache" --certificate-authority="" (certificate authority) --client-certificate="" TLS --client-key="" TLS --cluster="" kubeconfig --context="" kubeconfig --disable-compression=false true --insecure-skip-tls-verify=false true . HTTPS --kubeconfig="" kubeconfig CLI. --kuberc="" kuberc (preferences). export feature gate KUBECTL_KUBERC=false KUBERC=off . --match-server-version=false -n, --namespace="" namespace CLI --password="" (basic authentication) API --profile="none" . (none|cpu|heap|goroutine|threadcreate|block|mutex|trace) --profile-output="profile.pprof" --request-timeout="0" . ( 1s 2m 3h). ( timeout). -s, --server="" Kubernetes API --tls-server-name="" . hostname --token="" Bearer API --user="" kubeconfig --username="" API --version=false --version --version=raw --version=vX.Y.Z... --warnings-as-errors=false (EXAMPLES) # kube-apiserver "myapp" namespace kubectl create token myapp # namespace kubectl create token myapp --namespace myns # kubectl create token myapp --duration 10m # (audience) kubectl create token myapp --audience https://example.com # Secret kubectl create token myapp --bound-object-kind Secret --bound-object-name mysecret # Secret UID kubectl create token myapp --bound-object-kind Secret --bound-object-name mysecret --bound-object-uid 0d4691ed-659b-4935-a832-355f77ee47cc (SEE ALSO) kubectl-create(1) (HISTORY) Eric Paris (eparis at redhat dot com) kubernetes ! Eric Paris Jan 2015 KUBERNETES(1)