Your cart is currently empty!
Kubernetes: RoleBinding, ClusterRoleBinding
RoleBinding in Kubernetes is used to tie together ServiceAccount and/or User and/or Group to particular Role/ClusterRole.
RoleBinding is limited within a particular namespace, whereas ClusterRoleBinding is global.
Binding Role to ServiceAccount :
Shell
x
1
1
kubectl create rolebinding <name> --role=<role-name> --service-account=<sa1-namespace>:<sa1-name> --service-account=<sa2-namespace>:<sa2-name>Binding Role to User:
Shell
1
1
1
kubectl create rolebinding <name> --role=<role-name> --user=user1 --user=user2Binding Role to Group:
Shell
1
1
1
kubectl create rolebinding <name> --role=<role-name> --group=group1 --group=group2Once you bind, you can check the permission with:
Shell
1
4
1
kubectl auth can-i --list2
kubectl auth can-i --list --as system:serviceaccount:<sa-namespace>:<sa-name>3
kubectl auth can-i --list --as <user-name>4
kubectl auth can-i --list --as-group <group-name> --as <any-user-name-valid-or-not-valid> Shell
1
3
1
kubectl auth can-i <verb> <resource>2
kubectl auth can-i get pods3
kubectl auth can-i delete podsRefrences: