41 lines
1.0 KiB
YAML
41 lines
1.0 KiB
YAML
|
---
|
||
|
|
apiVersion: v1
|
||
|
|
kind: ServiceAccount
|
||
|
|
metadata:
|
||
|
|
name: test-sa
|
||
|
|
namespace: default
|
||
|
|
---
|
||
|
|
apiVersion: v1
|
||
|
|
kind: Pod
|
||
|
|
metadata:
|
||
|
|
name: test-pod
|
||
|
|
namespace: default
|
||
|
|
spec:
|
||
|
|
serviceAccountName: test-sa
|
||
|
|
containers:
|
||
|
|
- name: test-container
|
||
|
|
image: curlimages/curl:latest
|
||
|
|
command:
|
||
|
|
- sh
|
||
|
|
- -c
|
||
|
|
- |
|
||
|
|
echo "Service Account Token:"
|
||
|
|
cat /var/run/secrets/kubernetes.io/serviceaccount/token
|
||
|
|
echo -e "\n\nMaking API request to Vultr..."
|
||
|
|
curl -v -X GET https://api.vultr.com/v2/oidc/token \
|
||
|
|
-H "Authorization: Bearer $(cat /var/run/secrets/kubernetes.io/serviceaccount/token)" \
|
||
|
|
-H "Content-Type: application/json"
|
||
|
|
echo -e "\n\nSleeping to keep pod alive for manual testing..."
|
||
|
|
sleep 3600
|
||
|
|
volumeMounts:
|
||
|
|
- name: token
|
||
|
|
mountPath: /var/run/secrets/kubernetes.io/serviceaccount
|
||
|
|
readOnly: true
|
||
|
|
volumes:
|
||
|
|
- name: token
|
||
|
|
projected:
|
||
|
|
sources:
|
||
|
|
- serviceAccountToken:
|
||
|
|
path: token
|
||
|
|
expirationSeconds: 3600
|
||
|
|
restartPolicy: Never
|