client bundle
A zip file from UCP or MKE holding a user's certificate and key, the CA, env.sh and a kubeconfig, for command-line access.
Anyone holding the bundle acts as its owner until it is revoked.
In more detail
Sourcing env.sh sets DOCKER_HOST, DOCKER_TLS_VERIFY and DOCKER_CERT_PATH and configures kubectl. Every command then runs as that user, limited by their grants; deleting the key revokes it.
Related terms
- Universal Control Plane — The old name of Mirantis Kubernetes Engine, the web interface, API and access control that manage a Swarm and Kubernetes cluster.
- DOCKER_HOST — The environment variable that tells the docker client which engine to talk to, such as tcp://node6:2376.
Taught in
- Installation Sprint: Eight Configuration Calls — Docker Certified Associate (DCA) Exam Prep
- Who Let Femi In? UCP Roles, Grants, LDAP And Client Bundles — Docker Certified Associate (DCA) Exam Prep
- Security Sprint: Eight Questions On Defaults, Trust And Access — Docker Certified Associate (DCA) Exam Prep