title: How to Add Users to Kubernetes (kubectl)?
body: <p>I've created a Kubernetes cluster on AWS with <a href="https://github.com/kubernetes/kops" rel="noreferrer">kops</a> and can successfully administer it via <code>kubectl</code> from my local machine.</p>
  
  <p>I can view the current config with <code>kubectl config view</code> as well as directly access the stored state at <code>~/.kube/config</code>, such as:</p>
  
  <pre><code>apiVersion: v1
  clusters:
  - cluster:
      certificate-authority-data: REDACTED
      server: https://api.{CLUSTER_NAME}
    name: {CLUSTER_NAME}
  contexts:
  - context:
      cluster: {CLUSTER_NAME}
      user: {CLUSTER_NAME}
    name: {CLUSTER_NAME}
  current-context: {CLUSTER_NAME}
  kind: Config
  preferences: {}
  users:
  - name: {CLUSTER_NAME}
    user:
      client-certificate-data: REDACTED
      client-key-data: REDACTED
      password: REDACTED
      username: admin
  - name: {CLUSTER_NAME}-basic-auth
    user:
      password: REDACTED
      username: admin
  </code></pre>
  
  <p>I need to enable other users to also administer. This <a href="https://kubernetes.io/docs/user-guide/sharing-clusters/" rel="noreferrer">user guide</a> describes how to define these on another users machine, but doesn't describe how to actually create the user's credentials within the cluster itself. How do you do this?</p>
  
  <p>Also, is it safe to just share the <code>cluster.certificate-authority-data</code>?</p>