Login

To log in to the KubeSlice Manager, you need a service account token-based kubeconfig file. The default "admin" user account can be used for initial login, or you can use any other service account user created during the installation process.

Create a Service Account Token-based Kubeconfig File

Follow the below instructions using the script provided to create the service account token-based kubeconfig file to login to the KubeSlice Manager.

Kubeconfig Generation Script

Copy and paste the script provided below in a file called 'kube-configs.sh'

# The script returns a kubeconfig for the service account.
# you need to have kubectl on PATH with the context set to the cluster you want to create the config file.

# Cosmetics for the created config
clusterName=$1
# your server address goes here get it via `kubectl cluster-info`
server=$2
# the Namespace and ServiceAccount name that is used for the config
namespace=$3
serviceAccount=$4

######################
# actual script starts
set -o errexit

secretName=$(kubectl --namespace $namespace get serviceAccount $serviceAccount -o jsonpath='{.secrets[0].name}')
ca=$(kubectl --namespace $namespace get secret/$secretName -o jsonpath='{.data.ca\.crt}')
token=$(kubectl --namespace $namespace get secret/$secretName -o jsonpath='{.data.token}' | base64 --decode)

echo "
---
apiVersion: v1
kind: Config
clusters:
  - name: ${clusterName}
    cluster:
      certificate-authority-data: ${ca}
      server: ${server}
contexts:
  - name: ${serviceAccount}@${clusterName}
    context:
      cluster: ${clusterName}
      namespace: ${namespace}
      user: ${serviceAccount}
users:
  - name: ${serviceAccount}
    user:
      token: ${token}
current-context: ${serviceAccount}@${clusterName}
"

The following information is required to run the kube-configs.sh script.

Parameter	Description !
<controller-cluster-name>	The given name of the Controller cluster.
<controller-endpoint>	The endpoint of Controller cluster. The endpoint you get by running this command on the Controller cluster: kubectl cluster-info. For example, https://34.85.129.240.
kubeslice-<projectname>	The given name of your project.
<serviceaccount-name>	The service account you get by running this command on Controller cluster: kubectl get sa -n kubeslice-<projectname>. For example, kubeslice-rbac-rw-admin.

Use the following command to get the secrets for the Service Account:

sh kube-configs.sh <controller-cluster-name> <controller-endpoint> kubeslice-<projectname> <serviceaccount-name>

Example

sh kube-configs.sh gke-controller-final https://34.85.129.240 kubeslice-avesha kubeslice-rbac-rw-admin

Example Output

---
apiVersion: v1
kind: Config
clusters:
  - name: gke-controller-final
    cluster:
      certificate-authority-data: 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
      server: https://34.85.129.240
contexts:
  - name: kubeslice-rbac-rw-admin@gke-controller-final
    context:
      cluster: gke-controller-final
      namespace: kubeslice-avesha
      user: kubeslice-rbac-rw-admin
users:
  - name: kubeslice-rbac-rw-admin
    user:
      token: eyJhbGciOiJSUzI1NiIsImtpZCI6ImtYaU9NU19jZ2MzUml4VTRVOGlOdFhCUG42bmZBS2J1cldaV2FZcXlKLVUifQ.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.gUabkMT8x78fICr_uP6KGbUDUKlc8SweD_5xzrXfd3RVX8cMtFY4xd8K8GnafBtB77xJjrGz_9tqg6zEad-5ULV9wn3jopYe1WgvhruvPPjPV0DSQMTPSWReQv378a-tCHXrz30J1d6-r_VA5-8dwH--gZrusoBtc6646M7LRdPzS9CsbILdrVVJkoXD1eQyIGSsr4z6MLsGg_nxyU7dlTfYTGv_dQ6XMoljpIg9VBkoWuZgTQqpnbxJGZkWsB41Ri64HTbAKwlMTIvwT8LTmPqOOVubbtV-RoGAITDfV28sFggcmVzay5MKeNyYT-g6Fbi4pQERqU7_YPNlu_ANCQ
current-context: kubeslice-rbac-rw-admin@gke-controller-final

Kubeconfig Output

Copy the script output to a file. The output file is your kubeconfig file, which is required to access the KubeSlice Manager.

Example Output

The following is an example configuration file used to log in to the KubeSlice Manager.

apiVersion: v1
kind: Config
clusters:
  - name: aks-final-controller-cluster
    cluster:
      certificate-authority-data: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUU2VENDQXRHZ0F3SUJBZ0lSQVBoanpLZnZEOFJYY3ZXSEZDQlp6Qmt3RFFZSktvWklodmNOQVFFTEJRQXcKRFRFTE1Ba0dBMVVFQXhNQ1kyRXdJQmNOTWpJd016STRNRFF5TkRBd1doZ1BNakExTWpBek1qZ3dORE0wTURCYQpNQTB4Q3pBSkJnTlZCQU1UQW1OaE1JSUNJakFOQmdrcWhraUc5dzBCQVFFRkFBT0NBZzhBTUlJQ0NnS0NBZ0VBCnRBYWhVMldpMEltcHRSMXNwZUlDQlVGREtTRUhkVGVYN09xb2U2TllEVC9KMWJnRlBoeWJKRjMxUHJuR21wZ2wKVmt4NGxUbGIzMCt0b2g3UTJVMDRYU3p4VFRiMC9HbGkyTWtNcGdnVlJJNDlTQ2ZoeTdNa3RkS3ErQTZhRHRxRAovUGpGZWhsa0dWbDhnOFFublp5T05kOGtSVVo1L09USjMxbDVKWFF2b0dqUDFTTXZpN1ZlMUpTRHBFRzJLOW1uCkd5SnBwa2FVUUllTUluSHpNZFByQTlJT0dmRi9XQ1lkUkJtb0IxRk5qRVhraGdsUHFhb0Z5cllNYllBWmJ4eTEKMVJOL0hyRnNINDVtbVUwY1VTNXZnelJ3MGNIZzhsOVY2VkE3cVJqTkt0djlYclNRVmZwS1p4NkozR0NjK3l4MwpBVU56RXMvOE40SkF2VDc1ZUticlBnOVRZU2dnTHRWS3hkYTMrd084cExOeGZtTHRzNDBoWDdRYTBmRUNSZ1JZCjZqN01wYUdDTGtWakt3YjBkSmtWY0ZuMXBmS3BidTZ2azJGL3Q1WnpOYUhVZFhXMmRMRCtuZmdtUjZmclJ2djIKOGYvcXZBOENxcVlSOWt2L1EyeEEzd2xlaU0xZ3hERWppS1IvSEF3ZG5wM1hYdDgzMGY2cDZ4OGFKcGNuL3lpUApDM21vbEJaZW5yUDA0L2xDSWhXQk9RMjVoK0NBZGVCMFJ5Z2MxUFREeDR1RkRZZXIwcUpSYm1Vdk5zMkt0VklUCmFiT1hPWnkrdTVJb2lEbzlsWVdVZmtnU3VNMWJTYnQrR2pHN2tiRFlnNUZIMG1kRStPQm9obzBvQ2dxdUMvUE8Kc2JjbXBwdnVoVzM2bWIzcjJlRldLdUJQV1dDajFXV3h2SFIydTZnbmd4MENBd0VBQWFOQ01FQXdEZ1lEVlIwUApBUUgvQkFRREFnS2tNQThHQTFVZEV3RUIvd1FGTUFNQkFmOHdIUVlEVlIwT0JCWUVGTVZlTkRiU3ZGMC9FZXB3CksxaTF2b2taWXVoUU1BMEdDU3FHU0liM0RRRUJDd1VBQTRJQ0FRQTVSaURMU2ZxSjVDTEtITjI2NUxKRXdOVUEKWGtLR3JBNXRIVmdndGxvcHBYSG1LeU1LSms5Y3ZDNG10c050UFJHZXVlM2R3YWMxQ2MrQzBqZkNiSDJ3MXU5NAo4RVlSYnVjS2hXdVRhUFV3clRDb1orVEZMR2dxaFdoU1htWkFGWnZPbk16dStqeGZPQTRyNkpiRnRJdzVaZVlPCmo0NTlTUzZnc2F2VlZzWlhia0Y0eWI0QjVEazhlUFg0K1l2OWFpQXVGay9GVSt6b2grSldHZHJvRXVyNnI0MzMKSEdXejYyNjdEdUMvRVlDbnAyejcySmF4RWhQVVBwWjBKeC9rU1RoVkoxalpPbDdTbmIvQ1JjSUpzb2ZpbkxFYQpqdUY2WmJZcDFQZlcwVTBkazUyVG0wY0JTdEVwREV0N2cySm0vMGlZbXptaHhhelhoVnZvSktVT3RoWWhnVkd5CkR6S25Dc0pnNXVrRWlweXo5WGZZZjBtRytyWmVwNEhFSWpreCtvSUdHUGRZK0d3WDJRd1VyRWZrVmoyWjJZNnAKRk9iYys5UENZMS9WT1htalNFbnppVnU4dDZZREFuZjlFTTlaQ3dyMW03REVvaXVrbzBNUE9Ub1JiNGVZOU9PawoxS2xJY3I3bm12Yjl5L2J3cFFGUlVjckhwWmxMcm9tbFo4SGJ5MS9ub0Mwd21TRllUNytNVCs5RVBsQjNEbkR5CmVrclUwWXhqcHVMRGtXdnA2dXlLRXFtKzIvUlJDY0JhL1RqUHRHbHNQR2tsdERROWo0WGY0NFhGejI2M3dFeXAKMEMvWDlhOXhSTXFIMGpNSXMzTE5QekVCNCt1d3VwT2hFVXlxRVpZVEhCNGdDWlQ1eXNFT3BoQXJSTHF5NGxCSApyMzl5Z1Zmb0NVRnFQWkloc0E9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg==
      server: https://20.99.138.190
contexts:
  - name: kubeslice-rbac-rw-admin@aks-final-controller-cluster
    context:
      cluster: aks-final-controller-cluster
      namespace: kubeslice-devops
      user: kubeslice-rbac-rw-admin
users:
  - name: kubeslice-rbac-rw-admin
    user:
      token: eyJhbGciOiJSUzI1NiIsImtpZCI6IkR4YjhTVW5DSVJ4dEZCT3Yzc3dwanNRZkdNRnhOR1FyRE50aVRjV0hmcGcifQ.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.rx_JUo6GdLrkOILsom6WqI-hQQG_5quPL3mPAFZHIhFC0BCJDZEizeGnOfNTcHdA1lBS4RUMrrurSR60z6P6llWxqyA9FznxIjTYdnrsZmEsv88H_RbiQh1gWfREKrvnOfmPcXaeHIPhvcdQwZSaGNb4wHNv7QusJAn6_yiF8DqezIsxuEm_rW0g-uPoFjQvyz8RM7pWqM8kUHAQckUJhS5Mx7jPxkE2Cgyuo5c7Dmi7n3nBmqGhOUPnBoSsFl4FoiHw1E7zbmYu_6qkMDA5SWsCX_MUXTEOOzSRSuISnZ1L4d5F5LoId_dzZr95bXJ_ELhlqb_h09cBHfEUYcvhx0VO8G5oAIxKFTKTzCQlAgqM8J0ngeceTvDhAc1tTmiw_gq-kh5qbeYh5sBjvELTCgb1JXbcW20rNOogU3Nk-Nxbb46Lo7f0r7uwcqIBtSTG4u1I0H7z-4DnUde-CSm7-D5QJRH1ysSC8vVqlXttnSKR9TLFMpwsKubferfkGhpvS7MUfxu5pPDpV7bw7gZ__7L4O_-L8C0rZPv8oX5BDWUE-YIPY9gNTixKbiezP0pPve9go2Niz-_LfyE9ga44X26r6q2YERNXACbHMlptHWV5G5k5E52z_D-nK17oyWEf5llUUfTKmE6D3kLbqUAAHx2BBT4vnaRgKFc5KmukyU4
current-context: kubeslice-rbac-rw-srinivas@aks-final-controller-cluster

Access the KubeSlice Manager using the Kubeconfig File

After creating the kubeconfig file with the service account token you can access the KubeSlice Manager.

To log in to the KubeSlice Manager:

1. Go to the URL that you have retrieved as described in KubeSlice Manager Endpoint.

   

2. On the login page, for Enter Service Account Token, copy the token from the kubeconfig file that you have generated from the script and paste the service account token.

   Alternatively, drop or upload your kubeconfig file that you have created above in the text box below that states Drop your KubeConfig file in the box or Click here to upload.

3. Click Sign in. After a successful authentication, you see the dashboard of the KubeSlice Manager as the landing page.