liveBook · Manning

RoleBinding

As explained in Google Anthos in Action

A RoleBinding is a Kubernetes RBAC resource that grants the permissions of a role to users, groups, or service accounts within a namespace.

A RoleBinding grants the permissions defined by a Role to users, groups, or service accounts within the RoleBinding’s namespace. Roles define permissions but do not assign them; the binding performs that assignment. section 3.2.6

Understand RoleBinding through its scope and relationship to other RBAC resources:

  • A RoleBinding created in a namespace can assign permissions only within that namespace. section 3.2.6
  • A RoleBinding can bind either a namespace-scoped Role or a ClusterRole used at namespace scope. section 3.2.6
  • A ClusterRoleBinding provides the contrasting cluster-wide binding scope. section 3.2.6
Table 3.7 Binding types and their scopes (view table figure)

Binding type

Scope

Description

RoleBinding

Namespace

Can be used to assign permissions only in the namespace in which it was created

ClusterRoleBinding

Cluster

Can be used to assign permissions cluster wide

Compare RoleBinding and ClusterRoleBinding by scope and permission-assignment behavior. section 3.2.6

How Google Anthos in Action covers it

How deep it goes
Defines namespace scope and binding relationships, but does not detail manifest structure or creation commands.
Examples
Contrasts namespace-scoped RoleBindings with cluster-wide ClusterRoleBindings and mentions built-in admin and view ClusterRoles.
What it assumes
Assumes familiarity with Kubernetes namespaces, roles, identities, and permissions.
What you can do after
Operate access control by binding a Role or ClusterRole to an identity in a namespace.
How it connects
Connects Roles, ClusterRoles, ClusterRoleBindings, users, groups, and service accounts.

Also explained in

Compare how 3 books explain RoleBinding →

Related concepts

This explainer was generated by Manning's knowledge graph from the text of Google Anthos in Action. The section links point to the parts of the book it draws on.