RoleBinding

As explained in Kubernetes for Developers

A Kubernetes RoleBinding is a namespace-scoped object that assigns a Role to subjects such as users, groups, or service accounts.

kind: RoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: developerA
  namespace: team1
roleRef:
  kind: Role
  name: developer-access         #1
  apiGroup: rbac.authorization.k8s.io
subjects:
# Google Cloud user account
- kind: User
  name: example@gmail.com        #2

How Kubernetes for Developers covers it

How deep it goes

Defines the binding fields and demonstrates namespace and cluster-scope consequences through kubectl operations.

Examples

Uses a developer binding, team1 namespace, Deployment creation, and denied namespace or cluster-scoped operations.

What it assumes

Requires understanding Roles, subjects, namespaces, API resources, and verbs.

What you can do after

Operate Kubernetes access by binding a named Role to an identity and testing permitted operations.

How it connects

Connects Role, subjects, RBAC, ClusterRole, and ClusterRoleBinding.

liveBookmanning.com

Read Kubernetes for Developers on liveBook Get the book at manning.com

Also explained in

• 

  liveBookmanning.com
  Acing the Certified Kubernetes Administrator Exam, Second EditionA RoleBinding is a Kubernetes API object that grants the permissions of a Role or ClusterRole to specified subjects within a namespace.
• 

  liveBookmanning.com
  Google Anthos in ActionA RoleBinding is a Kubernetes RBAC resource that grants the permissions of a role to users, groups, or service accounts within a namespace.

Compare how 3 books explain RoleBinding →

Related concepts

• role-based access controlused by · Role-based access control is an authorization model that assigns permissions to roles and grants users or other principals access through their assigned roles.
• roleuses · A role is a defined function, responsibility, perspective, or set of permissions associated with a participant in an organization or system.
• useruses · A user is a person or other entity that interacts with, or is represented within, a system to access or use its functions.
• roleuses · A Kubernetes Role is a namespace-scoped RBAC authorization resource that defines permitted actions on specified Kubernetes API resources.
• service accountconfigures · A service account is a non-human identity or account used by software, services, or automated processes to authenticate and access authorized resources.
• clusterroleused by · A Kubernetes ClusterRole is an RBAC resource defining permissions for cluster-scoped resources or for use across namespaces.

This explainer was generated by Manning's knowledge graph from the text of Kubernetes for Developers. The section links point to the parts of the book it draws on.