CA Certificate and JWT tokens on kubernetes

2019-08-01 20:39发布

With what CA Certificate are the Kubernetes Service Account JWT tokens signed with? Is there a way to get the public key with which kubernetes service accounts are signed in GKE?

1条回答
别忘想泡老子
2楼-- · 2019-08-01 21:12

You have no access to that key in GKE.

In general, the Service Account JWT tokens are signed with an RSA key by the controller manager. The key is specified by the --service-account-private-key-file for kube-controller-manager. (The public key is specified by the --service-account-key-file parameter for kube-apiserver.)

查看更多
登录 后发表回答