<p>I'm currently trying to figure out the best way, as a Kubernetes admin, to make users and give them access to <code>kubectl</code>. Originally, I was going to use serviceAccounts, but it seems that that should not be used as authentication for users. I have been reading over this: <a href="https://kubernetes.io/docs/admin/authentication/#users-in-kubernetes" rel="nofollow noreferrer">https://kubernetes.io/docs/admin/authentication/#users-in-kubernetes</a> but there are so many different ways to authenticate I was not sure what the best practices are for my use case. Thanks for any help!</p>

<p>i would go the cert route.  I believe that what most people use for production and its what we currently use.  I included a link to the hard way which has a better description on making certs. </p>

<p><a href="https://github.com/kelseyhightower/kubernetes-the-hard-way/blob/master/docs/02-certificate-authority.md" rel="nofollow noreferrer">https://github.com/kelseyhightower/kubernetes-the-hard-way/blob/master/docs/02-certificate-authority.md</a> </p>

<p>good luck</p>
