...
Code Block |
---|
apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: cloudaware-reader rules: - apiGroups: ["*"] resources: ["*"] verbs: ["get", "watch", "list"] --- kind: ClusterRoleBinding metadata: name: <sp<SAMPLE-roleROLE-binding>BINDING> roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole name: <cluster<CLUSTER-admin>READER> subjects: - apiGroup: rbac.authorization.k8s.io kind: User name: <service-principal-object-id> |
WHERE
in ClusterRoleBinding:
<sp<SAMPLE-roleROLE-binding>BINDING> in metadata
is a placeholder that needs to be replaced by your Cluster Role Binding name
<cluster<CLUSTER-admin>READER> in roleRef
is a placeholder that needs to be replaced by your Cluster Role name
...