starlingx/docs
Code Issues Proposed changes
Files
cec32560f628a63183e74fceb019a97c4c2056ea
docs/doc/source/security/kubernetes/end-user-configure-k8s-remote-cli-fad235bb7a18.rst
Elisamara Aoki Gonçalves 0ac6ac7dc3 Fix prefix of stx-remote-cli-<version> tarball (dsR10,dsR10minor,r10) 
Fix prefix.

Change-Id: I68b91a01faed64dd1ecc2af6438ef41d221f1ccc
Signed-off-by: Elisamara Aoki Gonçalves <elisamaraaoki.goncalves@windriver.com>
2025-08-18 17:09:36 +00:00

2.8 KiB
Raw Blame History

End User - Configure Kubernetes Remote CLI

Configure the kubernetes remote on your Linux-based system to enable access to the system kubernetes remote commands.

This procedure should be performed on your Linux-based system.

  • You need to have a Linux-based system with python installed.
  • You need to have the -remote-access.tar file from your system administrator, containing system information related to your system.

  1. Install the kubectl client CLI on the host.

    Follow the instructions on Install and Set Up kubectl on Linux <https://kubernetes.io/docs/tasks/tools/install-kubectl-linux/>.

    The example below can be used for Ubuntu.

    $ sudo curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl"
$ sudo install -o root -g root -m 0755 kubectl /usr/local/bin/kubectl

  2. Download the oidc-auth shell script from site and install python mechanize.

    $ wget`https://mirror.starlingx.cengn.ca/mirror/starlingx/master/debian/monolithic/latest_build/outputs/remote-cli/ <https://mirror.starlingx.cengn.ca/mirror/starlingx/master/debian/monolithic/latest_build/outputs/remote-cli/stx-remote-cli-1.0.tgz>`__\ oidc-auth
$ chmod a+rx oidc-auth

$ sudo apt install python3-pip
$ sudo pip install mechanize

  3. Extract the system information from the -remote-access-info.tar file from your system administrator.

    # Files from your StarlingX System Administrator $ ls ~/-remote-access-info.tar

    $ tar xvf ~/-remote-access-info.tar

  4. Update the KUBECONFIG file.

    $ mkdir ~/.kube $ cp ~/-remote-access-info/kubeconfig ~/.kube/config $ vi ~/.kube/config // and change YOURUSERNAMEHERE to your StarlingX LDAP Username, everywhere in file

    # Add ~/-remote-access-info/stx.ca.crt to the list of Trusted CA # e.g. commands shown for ubuntu below $ sudo cp ~/-remote-access-info/stx.ca.crt /usr/local/share/ca-certificates $ sudo update-ca-certificates

    # Authenticate with OIDC/LDAP on StarlingX ... and token will be put in ~/.kube/config $ ./oidc-auth -u <StarlingX-LDAP-Username> -c <OAM-FLOATING-IP>

Access the kubernetes remote .

See end-user-access-k8s-remote-cli-7bb5b71ed604.