How deeply does Effective Platform Engineering cover cluster role binding?

Defines and deploys one administrative binding, but does not detail RBAC evaluation or permission design.

Cluster role binding

As explained in Effective Platform Engineering

A cluster role binding is a Kubernetes authorization resource that grants the permissions of a cluster role to specified subjects across the cluster.

A ClusterRoleBinding is a Kubernetes authorization resource that grants a ClusterRole’s permissions to specified subjects across the cluster. A typical platform setup binds the cluster-admin role to a GitHub-backed platform engineering group, giving its members administrative kubectl access. section 7.4.5

Platform-team administrator binding

Store the resource as tpl/admin-clusterrolebinding.yaml, bind the platform team group to cluster-admin, and apply it during base configuration.

How Effective Platform Engineering covers it

liveBook manning.com

Read Effective Platform Engineering on liveBook Get the book at manning.com

Also explained in

liveBook manning.com

Acing the Certified Kubernetes Administrator Exam, Second EditionA ClusterRoleBinding is a Kubernetes API object that grants the permissions of a ClusterRole to specified subjects across the cluster.
liveBook manning.com

Google Anthos in ActionA ClusterRoleBinding is a Kubernetes RBAC resource that grants a ClusterRole's permissions across the cluster.
liveBook manning.com

Kubernetes for DevelopersA Kubernetes ClusterRoleBinding assigns a ClusterRole to subjects at cluster scope.

Compare how 4 books explain cluster role binding →

Related concepts

role-based access controlconfigures · Role-based access control is an authorization model that assigns permissions to roles and grants users or other principals access through their assigned roles.
groupconfigures · A group is a named collection of identities or resources managed together for shared permissions, access policies, or administrative properties.
clusterroleconfigures · A Kubernetes ClusterRole is an RBAC resource defining permissions for cluster-scoped resources or for use across namespaces.
RoleBindingcontrasts with · A RoleBinding is a Kubernetes RBAC resource that grants a Role or ClusterRole's permissions to specified users, groups, or service accounts within a namespace.

This explainer was generated by Manning's knowledge graph from the text of Effective Platform Engineering. The section links point to the parts of the book it draws on.