apiVersion: v1
kind: ServiceAccount
metadata:
  name: kubepi-admin
  namespace: wms-system
  labels:
    app: kubepi
---
apiVersion: v1
kind: Secret
metadata:
  name: kubepi-admin-token
  namespace: wms-system
  annotations:
    kubernetes.io/service-account.name: kubepi-admin
type: kubernetes.io/service-account-token
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: kubepi-admin-binding
  labels:
    app: kubepi
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: cluster-admin
subjects:
  - kind: ServiceAccount
    name: kubepi-admin
    namespace: wms-system
---
# 应用配置后，执行以下命令获取长期有效的 Bearer Token:
# kubectl -n wms-system get secret kubepi-admin-token -o jsonpath='{.data.token}' | base64 -d
#
# 获取 API Server 地址:
# kubectl cluster-info