正文
Kubernetes RBAC授权普通用户对命名空间访问权限
提示：扫一扫查出行【扫一扫了解最新限行尾号】
复制提示
Kubernetes RBAC授权普通用户对命名空间访问权限
官方文档：https://www.cnblogs.com/xiangsikai/p/11413970.html
kind: Role
apiVersion: rbac.authorization.k8s.io/v1
metadata:
namespace: default
name: pod-reader
rules:
- apiGroups: [""]
resources: ["pods"]
verbs: ["get", "watch", "list"]
kind: RoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
name: read-pods
namespace: default
subjects:
- kind: User
name: jane
apiGroup: rbac.authorization.k8s.io
roleRef:
kind: Role
name: pod-reader
apiGroup: rbac.authorization.k8s.io
