Kubernetes - 7.2 RBAC - RoleBinding

什麼是RoleBinding

RoleBinding通過已經定義的Role權限授予到使用者、使用者組，進而讓使用者獲得在NameSpace對應的操作資源權限。

RoleBinding基本操作

通過YAML資源定義清單建立RoleBinding

kubectl apply -f pod-rolebinding.yaml

apiVersion: rbac.authorization.k8s.io/v1beta1
kind: RoleBinding
metadata:
  name: pod-rolebinding
  namespace: default
subjects:
- kind: User
  name: carry
  apiGroup: rbac.authorization.k8s.io
roleRef:
  kind: Role
  name: pod-role
  apiGroup: rbac.authorization.k8s.io           

#### 什麼是ClusterRoleBinding

ClusterRoleBinding通過已經定義的ClusterRole權限授予到使用者或使用者組，進而讓使用者獲得叢集内對應的操作資源權限。

ClusterRoleBinding基本操作

通過YAML資源定義清單建立ClusterRoleBinding

kubectl apply -f pod-clusterrolebinding.yaml

apiVersion: rbac.authorization.k8s.io/v1beta1
kind: ClusterRoleBinding
metadata:
  name: pod-clusterrolebinding
subjects:
- kind: Group
  name: super-admin
  apiGroup: rbac.authorization.k8s.io
roleRef:
  kind: ClusterRole
  name: pod-clusterrole
  apiGroup: rbac.authorization.k8s.io           

相關參數

RoleBinding、ClusterRoleBinding綁定的Subject對象可以是User、Group、Service Account