Create user group using RBAC API?

kubernetes rbac kubectl
Toren picture Toren · Jun 26, 2017 · Viewed 10.1k times · Source

I can't find documentation on how to create user group on Kubernetes with yaml file. I'd like gather some authenticated users in group using their e-mail accounts.

I'd like to write in yaml something like :

 kind: GoupBinding
 apiVersion: rbac.authorization.k8s.io/v1beta1
 metadata:
   name: "frontend-developers"
   namespace: development
subjects:
- kind: User
  name: [email protected],[email protected]
  apiGroup: ""

Answer

Jordan Liggitt picture Jordan Liggitt · Jun 26, 2017

Groups are determined by the configured authentication method. See https://kubernetes.io/docs/admin/authentication/ for details about how each authenticator determines the group membership of the authenticated user.

Related questions

Create user in Kubernetes for kubectl

I need to create users to assign them permissions with RBAC, I create them as follows: echo -n "lucia" | base64 bHVjaWE= echo -n "pass" | base64 cGFzcw== apiVersion: v1 kind: Secret metadata: name: lucia-secret type: Opaque data: username: bHVjaWE= password: cGFzcw== …

Read More
how to check whether RBAC is enabled, using kubectl

I'm trying to install a helm package on a kubernetes cluster which allegedly has RBAC disabled. I'm getting a permission error mentioning clusterroles.rbac.authorization.k8s.io, which is what I'd expect if RBAC was enabled. Is there a …

Read More
How to view members of subject with Group kind

There is a default ClusterRoleBinding named cluster-admin. When I run kubectl get clusterrolebindings cluster-admin -o yaml I get: apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: annotations: rbac.authorization.kubernetes.io/autoupdate: "true" creationTimestamp: 2018-06-13T12:19:26Z …

Read More