Which Kubernetes object is used to grant permissions to a cluster-wide resource?
In Kubernetes RBAC, ClusterRoleBinding is the mechanism for granting permissions to resources that are not namespace-scoped. The documentation integrated into VCF 9.0 explains: ''ClusterRoleBinding binds a user, group, or service account to a ClusterRole, granting cluster-wide permissions to non-namespaced resources such as nodes, storage classes, or persistent volumes.''
A RoleBinding grants access to namespace-scoped resources. RoleReference is a field within a RoleBinding/ClusterRoleBinding object, not a standalone object. ClusterRoleAccess is not a valid Kubernetes construct.
Thus, to assign permissions at a cluster-wide level, the correct object is ClusterRoleBinding.
Keshia
3 months agoTesha
3 months agoKaran
4 months agoLawrence
4 months agoMelinda
4 months agoEden
4 months agoBernadine
4 months agoAide
5 months agoLarue
5 months agoElliot
5 months agoRory
5 months agoGail
6 months agoCarlee
6 months agoDelmy
6 months agoHoney
6 months agoMerissa
6 months agoChantell
6 months agoCeola
7 months agoShasta
7 months agoKallie
7 months agoOzell
7 months agoMarleen
8 months agoChau
8 months agoYaeko
8 months agoTeri
8 months agoKerry
3 months agoDexter
3 months agoJanessa
3 months agoPamella
3 months agoMargart
7 months ago