一个kubernetes集群中会有多个不同的命名空间，有时，我们需要限制某用户对某些特定命名空间的权限，比如，除了集群管理员外，我们的开发和测试工程师可能需要登录集群，了解应用的运行情况，查看pod的日志，甚至是修改某些配置。显然，我们不希望直接把管理员帐号提供给所有人，这时，可以通过创建受限的kubeconfig文件，将该config分发给特定的人员，让他们能通过kubectl命令实现一些允许的操作

I'm Chao Zhang, you can also call me tokers (it's my nickname), Alex. I'm a guy who loves Open Source. I'm now devoting myself to the API Gateway, Kubernetes, Service Mesh fields. If you want to talk with me, just mail to tokers@apache.org.

https://e.coding.net/codingcorp/nocalhost/bookinfo.git

import sys
import ruamel.yaml

def recurse(d, pat, rep):
    if isinstance(d, dict):
        for k in d:
            if isinstance(d[k], str):
                d[k] = d[k].replace(pat, rep)
            else:
               recurse(d[k], pat, rep)
    if isinstance(d, list):
        for idx, elem in enumerate(d):
            if isinstance(elem, str):
                d[idx] = elem.replace(pat, rep)
            else:
               recurse(d[idx], pat, rep)


yaml = ruamel.yaml.YAML()
yaml.preserve_quotes = True
with open('in.yaml') as fp:
    data = yaml.load(fp)
recurse(data, '<<id>>', 'xy: z')  # not that this makes much sense, but it proves a point
yaml.dump(data, sys.stdout)

The library needs the VC v14+ runtime library, not VS build tools. You can get the runtime from the MS downloads page. Install the VS 2015/2017/2019 redist as it is the latest version.

一路安装就可以

1、pip install six

2、pip install bit_array

3、pip install thriftpy

4、pip install thrift_sasl

5、pip install impyla