Manage kubeconfig files - Container Service for Kubernetes

Obtain, revoke, purge, or recover kubeconfig credentials to control cluster access securely.

Operations

Container Service for Kubernetes ACK signs and issues kubeconfig credentials containing identity information to Alibaba Cloud accounts, Resource Access Management (RAM) users, or RAM roles for cluster access.

Important

Under the shared responsibility model, you are responsible for maintaining kubeconfig credentials. Keep credentials available and valid to prevent security risks from leaks.

Operation	Description	References
Obtain a kubeconfig file	Obtain a kubeconfig file to connect to a cluster over the Internet or an internal-facing network. To reduce security risks, prioritize using a temporary kubeconfig file.temporary kubeconfig file.	Obtain a cluster kubeconfig and connect to the cluster using kubectl
Revoke a kubeconfig file	Invalidates the credentials of a RAM user or role. A new kubeconfig file and authorization binding are generated.	Revoke the kubeconfig credential of a cluster
Purge a kubeconfig file	Permission administrators can batch manage permissions for clusters, RAM users, or RAM roles. Purging does not generate a new kubeconfig file. Recover purged files from the recycle bin within 30 days. When a user leaves the company or their permissions change, permission administrators can promptly purge their permissions in the console or with ack-ram-tool to reduce security risks.	Purge a kubeconfig file Use ack-ram-tool to purge the permissions of a specified user on a cluster
Recover a kubeconfig file	Use the kubeconfig recycle bin to recover only kubeconfig files that were purged within the last 30 days.	Use the kubeconfig recycle bin