Which Kubernetes object is used to grant permissions to a cluster-wide resource?
In Kubernetes RBAC, ClusterRoleBinding is the mechanism for granting permissions to resources that are not namespace-scoped. The documentation integrated into VCF 9.0 explains: ''ClusterRoleBinding binds a user, group, or service account to a ClusterRole, granting cluster-wide permissions to non-namespaced resources such as nodes, storage classes, or persistent volumes.''
A RoleBinding grants access to namespace-scoped resources. RoleReference is a field within a RoleBinding/ClusterRoleBinding object, not a standalone object. ClusterRoleAccess is not a valid Kubernetes construct.
Thus, to assign permissions at a cluster-wide level, the correct object is ClusterRoleBinding.
Keshia
2 months agoTesha
2 months agoKaran
2 months agoLawrence
2 months agoMelinda
2 months agoEden
3 months agoBernadine
3 months agoAide
3 months agoLarue
4 months agoElliot
4 months agoRory
4 months agoGail
4 months agoCarlee
4 months agoDelmy
4 months agoHoney
5 months agoMerissa
5 months agoChantell
5 months agoCeola
5 months agoShasta
5 months agoKallie
5 months agoOzell
6 months agoMarleen
6 months agoChau
6 months agoYaeko
6 months agoTeri
7 months agoKerry
1 month agoDexter
1 month agoJanessa
1 month agoPamella
2 months agoMargart
6 months ago