Difference between revisions of "Kind: Role"
Jump to navigation
Jump to search
| Line 3: | Line 3: | ||
* https://archive.eksworkshop.com/beginner/090_rbac/create_role_and_binding/ | * https://archive.eksworkshop.com/beginner/090_rbac/create_role_and_binding/ | ||
| − | + | ||
| − | cat << EoF > rbacuser-role.yaml | + | cat << EoF > rbacuser-role.yaml |
| − | kind: Role | + | kind: Role |
| − | apiVersion: rbac.authorization.k8s.io/v1 | + | apiVersion: [[rbac.authorization.k8s.io/v1]] |
| − | metadata: | + | metadata: |
| − | + | namespace: rbac-test | |
| − | + | name: pod-reader | |
| − | rules: | + | rules: |
| − | - apiGroups: [""] # "" indicates the core API group | + | - apiGroups: [""] # "" indicates the core API group |
| − | + | resources: ["pods"] | |
| − | + | verbs: ["list","get","watch"] | |
| − | - apiGroups: ["extensions","apps"] | + | - apiGroups: ["extensions","apps"] |
| − | + | resources: ["deployments"] | |
| − | + | verbs: ["get", "list", "watch"] | |
| − | EoF | + | EoF |
| − | |||
== Related == | == Related == | ||
Revision as of 12:42, 4 October 2023
kind: Role
cat << EoF > rbacuser-role.yaml kind: Role apiVersion: rbac.authorization.k8s.io/v1 metadata: namespace: rbac-test name: pod-reader rules: - apiGroups: [""] # "" indicates the core API group resources: ["pods"] verbs: ["list","get","watch"] - apiGroups: ["extensions","apps"] resources: ["deployments"] verbs: ["get", "list", "watch"] EoF
Related
See also
- Kubernetes roles,
kubectl get [ roles | clusterroles | clusterrolebindings ], kubectl create rolebinding, K8s Cluster roles - Kubernetes RBAC
kubectl auth, kubectl auth can-i, kubectl auth reconcilekubectl create [ role | clusterrole | clusterrolebinding|rolebinding | serviceaccount ], groups:, Kubernetes RBAC good practices,kube2iam, K8s Cluster roles,rbac.authorization.k8s.io,system:
Advertising:
