Usage¶
Tip
All of Vaults Environment Variables are supported.
> kubectl-vault-login -h
A kubectl plugin to to obtain access to a kubernetes cluster via HashiCorp Vaults Kubernetes secrets engine
Usage:
kubectl-vault-login [flags]
Flags:
-a, --audiences string A comma separated string containing the intended audiences of the generated Kubernetes service account (VAULT_K8S_LOGIN_AUDIENCES)
-c, --crb If true, generate a ClusterRoleBinding to grant permissions across the whole cluster instead of within a namespace (VAULT_K8S_LOGIN_CRB)
-h, --help help for kubectl-vault-login
-m, --mount string The Kubernetes secrets mount path (VAULT_K8S_LOGIN_MOUNT) (default "kubernetes")
-n, --ns string The name of the Kubernetes namespace in which to generate the credentials (VAULT_K8S_LOGIN_NAMESPACE)
-r, --role string The name of the role to generate credentials for (VAULT_K8S_LOGIN_ROLE)
-t, --ttl string The ttl of the generated Kubernetes service account (VAULT_K8S_LOGIN_TTL) (default "1h")