Which Kubernetes object is used to grant permissions to a cluster-wide resource?
In Kubernetes RBAC, ClusterRoleBinding is the mechanism for granting permissions to resources that are not namespace-scoped. The documentation integrated into VCF 9.0 explains: ''ClusterRoleBinding binds a user, group, or service account to a ClusterRole, granting cluster-wide permissions to non-namespaced resources such as nodes, storage classes, or persistent volumes.''
A RoleBinding grants access to namespace-scoped resources. RoleReference is a field within a RoleBinding/ClusterRoleBinding object, not a standalone object. ClusterRoleAccess is not a valid Kubernetes construct.
Thus, to assign permissions at a cluster-wide level, the correct object is ClusterRoleBinding.
Aide
9 days agoLarue
15 days agoElliot
20 days agoRory
25 days agoGail
1 month agoCarlee
1 month agoDelmy
1 month agoHoney
2 months agoMerissa
2 months agoChantell
2 months agoCeola
2 months agoShasta
2 months agoKallie
2 months agoOzell
3 months agoMarleen
3 months agoChau
3 months agoYaeko
3 months agoTeri
4 months agoMargart
3 months ago