Kubernetes RoleBinding

什么是RoleBinding

RoleBinding通过已经定义的Role权限授予到用户、用户组，从而让用户获得在NameSpace对应的操作资源权限。

RoleBinding基本操作

通过YAML资源定义清单创建RoleBinding
kubectl apply -f pod-rolebinding.yaml

apiVersion: rbac.authorization.k8s.io/v1beta1
kind: RoleBinding
metadata:
  name: pod-rolebinding
  namespace: default
subjects:
- kind: User
  name: carry
  apiGroup: rbac.authorization.k8s.io
roleRef:
  kind: Role
  name: pod-role
  apiGroup: rbac.authorization.k8s.io

  

 

  
1
  
2
  
3
  
4
  
5
  
6
  
7
  
8
  
9
  
10
  
11
  
12
  
13
 

什么是ClusterRoleBinding

ClusterRoleBinding通过已经定义的ClusterRole权限授予到用户或用户组，从而让用户获得集群内对应的操作资源权限。

ClusterRoleBinding基本操作

通过YAML资源定义清单创建ClusterRoleBinding
kubectl apply -f pod-clusterrolebinding.yaml

apiVersion: rbac.authorization.k8s.io/v1beta1
kind: ClusterRoleBinding
metadata:
  name: pod-clusterrolebinding
subjects:
- kind: Group
  name: super-admin
  apiGroup: rbac.authorization.k8s.io
roleRef:
  kind: ClusterRole
  name: pod-clusterrole
  apiGroup: rbac.authorization.k8s.io

  

 

  
1
  
2
  
3
  
4
  
5
  
6
  
7
  
8
  
9
  
10
  
11
  
12
 

相关参数

RoleBinding、ClusterRoleBinding绑定的Subject对象可以是User、Group、Service Account

文章来源: blog.csdn.net，作者：叶康铭，版权归原作者所有，如需转载，请联系作者。

原文链接：blog.csdn.net/m0_38030719/article/details/104535440