Install-AksHciAdAuth

  • Artikel

Sinopsis

Menginstal autentikasi Active Directory.

Sintaks

Install-AksHciAdAuth -name <String>
                     -keytab [.\current.keytab]
                     [-previousKeytab <String>]
                     -SPN <String>
                     -adminUser <String>
                     [-TTL]    
                    

Install-AksHciAdAuth -name <String>
                     -keytab [.\current.keytab]
                     [-previousKeytab <String>]
                     -SPN <String>
                     -adminGroup <String>    
                     [-TTL]    
                    

Install-AksHciAdAuth -name <String>
                     -keytab [.\current.keytab]
                     [-previousKeytab <String>]
                     -SPN <String>
                     -adminUserSID <String>
                     [-TTL]    
                    

Install-AksHciAdAuth -name <String>
                     -keytab [.\current.keytab]
                     [-previousKeytab <String>]
                     -SPN <String>
                     -adminGroupSID <String>    
                     [-TTL]

Deskripsi

Menginstal autentikasi Active Directory.

Contoh

Contoh

Install-AksHciAdAuth -name mynewcluster1 -keytab <.\current.keytab> -previousKeytab <.\previous.keytab> -SPN <service/principal@CONTOSO.COM> -adminUser CONTOSO\Bob

Jika host kluster bergabung dengan domain

Install-AksHciAdAuth -name mynewcluster1 -keytab .\current.keytab -SPN k8s/apiserver@CONTOSO.COM -adminUser contoso\bob

Jika host kluster tidak bergabung dengan domain

Install-AksHciAdAuth -name mynewcluster1 -keytab .\current.keytab -SPN k8

Parameter

-nama

Nama alfanumerik dari kluster Kubernetes Anda.

Type: System.String
Parameter Sets: (All)
Aliases:

Required: True
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-keytab

Jalur file yang berisi file keytab. Pastikan file diberi nama current.keytab.

Type: System.String
Parameter Sets: (All)
Aliases:

Required: True
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-previousKeytab

Keytab sebelumnya yang digunakan sebelum kata sandi akun Active Directory diperbarui. Hal ini diperlukan ketika mengubah kata sandi Active Directory.

Type: System.String
Parameter Sets: (All)
Aliases:

Required: True
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

- Nama Prinsipal Layanan (SPN)

Nama prinsipal layanan berkaitan dengan akun API server AD.

Type: System.String
Parameter Sets: (All)
Aliases:

Required: True
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-adminUser

Nama pengguna admin yang akan diberi izin admin kluster.

Type: System.String
Parameter Sets: (All)
Aliases:

Required: True
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-adminGroup

Nama grup yang akan diberi izin admin kluster.

Type: System.String
Parameter Sets: (All)
Aliases:

Required: True
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-adminUserSID

SID pengguna yang akan diberi izin admin kluster.

Type: System.String
Parameter Sets: (All)
Aliases:

Required: True
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-adminGroupSID

SID grup yang akan diberi izin admin kluster.

Type: System.String
Parameter Sets: (All)
Aliases:

Required: True
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-TTL

Waktu hidup (dalam jam) untuk -previousKeytab jika diberikan. Defaultnya adalah 10 jam.

Type: System.Int32
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: 10
Accept pipeline input: False
Accept wildcard characters: False

Langkah berikutnya

Referensi AksHci PowerShell