A Practical Guide to Kubernetes/

...

/

Creating Cluster Role Bindings

Creating Cluster Role Bindings

Learn how to grant cluster-wide access to the user with the help of Cluster Role Bindings.

We'll cover the following...

View access across the cluster

We’ll change John’s view permissions so that they are applied across the whole cluster.

Instead of executing yet another ad-hoc kubectl commands, we’ll define the ClusterRoleBinding resource in YAML format so that the change is documented.

Looking into the definition

Let’s look at the definition in the crb-view.yml file:

apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: view
subjects:
- kind: User
  name: jdoe
  apiGroup: rbac.authorization.k8s.io
roleRef:
  kind: ClusterRole
  name: view
  apiGroup: rbac.authorization.k8s.io
...