If you see in this picture, you can notice that I have approved a certificate and it has been approved. But it is not issued…What will be the cause for it…???Please explain step by step…
Hello @Annamalai,
Check the following steps
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
name: john-developer
spec:
signerName: kubernetes.io/kube-apiserver-client
request: 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
usages:
- digital signature
- key encipherment
- client auth
groups:
- system:authenticated
kubectl certificate approve john-developer
kubectl create role developer --resource=pods --verb=create,list,get,update,delete --namespace=development
kubectl create rolebinding developer-role-binding --role=developer --user=john --namespace=development
kubectl auth can-i update pods --as=john --namespace=development
Thanks,
KodeKloud Support