RoleBinding fields

Reference for kind: RoleBinding. Deploy and subjects are on Role bindings.

roleRef and subjects sit at the document root. They are not fields of spec. describe rolebinding prints this same shape.

Deploy

apiVersion: datasance.com/v3 # required, string
kind: RoleBinding # required, string
metadata:
  name: alice-developer # required, string
  namespace: my-ecn # no, string
roleRef: # required, object. Document root. Not under spec
  kind: Role # required, string
  name: developer # required, string
  apiGroup: "" # no, string
subjects: # required, list. Document root. Not under spec
  - kind: User # required, string. User, Group, or ServiceAccount
    name: [email protected] # required, string
    apiGroup: "" # no, string

metadata.namespace is the namespace you passed with -n.

Fields

Field	Required	Description
metadata.name	Yes	Binding name. Unique in the namespace.
roleRef	Yes	The Role to grant. Root field.
roleRef.kind	Yes	Role.
roleRef.name	Yes	metadata.name of the Role.
roleRef.apiGroup	No	API group of the Role reference.
subjects	Yes	Who receives the Role. Root field.
subjects[].kind	Yes	User, Group, or ServiceAccount.
subjects[].name	Yes	Login name, identity provider role name, or ServiceAccount metadata.name.
subjects[].apiGroup	No	API group of the subject.

A ServiceAccount is application-scoped, but the subject name is the account name only. metadata.applicationName is set on the ServiceAccount.

Deploy

State	CLI
Name missing	Create with roleRef and subjects.
Name present	Update. The new roleRef and subjects replace the stored values.

See anything wrong with the document? Help us improve it!

Edit this page on GitHub!