1OC ADM POLICY(1)                   June 2016                  OC ADM POLICY(1)
2
3
4

NAME

6       oc  adm policy remove-cluster-role-from-user - Remove a role from users
7       for all projects in the cluster
8
9
10

SYNOPSIS

12       oc adm policy remove-cluster-role-from-user [OPTIONS]
13
14
15

DESCRIPTION

17       Remove a role from users for all projects in the cluster
18
19
20

OPTIONS

22       --allow-missing-template-keys=true
23           If true, ignore any errors in templates when a field or map key  is
24       missing  in  the  template.  Only applies to golang and jsonpath output
25       formats.
26
27
28       --dry-run=false
29           If true, only print the object that would be sent, without  sending
30       it.
31
32
33       --no-headers=false
34           When  using the default or custom-column output format, don't print
35       headers (default print headers).
36
37
38       -o, --output=""
39           Output format. One of:  json|yaml|wide|name|custom-columns=...|cus‐
40       tom-columns-file=...|go-template=...|go-template-file=...|json‐
41       path=...|jsonpath-file=...  See   custom   columns   [   ⟨http://kuber
42       netes.io/docs/user-guide/kubectl-overview/#custom-columns⟩],     golang
43       template  [  ⟨http://golang.org/pkg/text/template/#pkg-overview⟩]   and
44       jsonpath template [ ⟨http://kubernetes.io/docs/user-guide/jsonpath⟩].
45
46
47       --rolebinding-name=""
48           Name of the rolebinding to modify. If left empty it will operate on
49       all rolebindings
50
51
52       -z, --serviceaccount=[]
53           service account in the current namespace to use as a user
54
55
56       --show-labels=false
57           When printing, show all labels as the  last  column  (default  hide
58       labels column)
59
60
61       --sort-by=""
62           If  non-empty, sort list types using this field specification.  The
63       field  specification  is  expressed  as  a  JSONPath  expression  (e.g.
64       '{.metadata.name}').  The  field  in the API resource specified by this
65       JSONPath expression must be an integer or a string.
66
67
68       --template=""
69           Template string or path to template file  to  use  when  -o=go-tem‐
70       plate,  -o=go-template-file.  The template format is golang templates [
71http://golang.org/pkg/text/template/#pkg-overview⟩].
72
73
74

OPTIONS INHERITED FROM PARENT COMMANDS

76       --allow_verification_with_non_compliant_keys=false
77           Allow  a  SignatureVerifier  to  use  keys  which  are  technically
78       non-compliant with RFC6962.
79
80
81       --alsologtostderr=false
82           log to standard error as well as files
83
84
85       --application_metrics_count_limit=100
86           Max number of application metrics to store (per container)
87
88
89       --as=""
90           Username to impersonate for the operation
91
92
93       --as-group=[]
94           Group  to  impersonate for the operation, this flag can be repeated
95       to specify multiple groups.
96
97
98       --azure-container-registry-config=""
99           Path to the file containing Azure container registry  configuration
100       information.
101
102
103       --boot_id_file="/proc/sys/kernel/random/boot_id"
104           Comma-separated  list  of files to check for boot-id. Use the first
105       one that exists.
106
107
108       --cache-dir="/builddir/.kube/http-cache"
109           Default HTTP cache directory
110
111
112       --certificate-authority=""
113           Path to a cert file for the certificate authority
114
115
116       --client-certificate=""
117           Path to a client certificate file for TLS
118
119
120       --client-key=""
121           Path to a client key file for TLS
122
123
124       --cloud-provider-gce-lb-src-cidrs=130.211.0.0/22,209.85.152.0/22,209.85.204.0/22,35.191.0.0/16
125           CIDRs opened in GCE firewall for LB traffic proxy  health checks
126
127
128       --cluster=""
129           The name of the kubeconfig cluster to use
130
131
132       --container_hints="/etc/cadvisor/container_hints.json"
133           location of the container hints file
134
135
136       --containerd="unix:///var/run/containerd.sock"
137           containerd endpoint
138
139
140       --context=""
141           The name of the kubeconfig context to use
142
143
144       --default-not-ready-toleration-seconds=300
145           Indicates    the    tolerationSeconds   of   the   toleration   for
146       notReady:NoExecute that is added by default to every pod that does  not
147       already have such a toleration.
148
149
150       --default-unreachable-toleration-seconds=300
151           Indicates  the  tolerationSeconds  of  the  toleration for unreach‐
152       able:NoExecute that is added by default to  every  pod  that  does  not
153       already have such a toleration.
154
155
156       --docker="unix:///var/run/docker.sock"
157           docker endpoint
158
159
160       --docker-tls=false
161           use TLS to connect to docker
162
163
164       --docker-tls-ca="ca.pem"
165           path to trusted CA
166
167
168       --docker-tls-cert="cert.pem"
169           path to client certificate
170
171
172       --docker-tls-key="key.pem"
173           path to private key
174
175
176       --docker_env_metadata_whitelist=""
177           a  comma-separated  list of environment variable keys that needs to
178       be collected for docker containers
179
180
181       --docker_only=false
182           Only report docker containers in addition to root stats
183
184
185       --docker_root="/var/lib/docker"
186           DEPRECATED: docker root is read from docker info (this is  a  fall‐
187       back, default: /var/lib/docker)
188
189
190       --enable_load_reader=false
191           Whether to enable cpu load reader
192
193
194       --event_storage_age_limit="default=24h"
195           Max length of time for which to store events (per type). Value is a
196       comma separated list of key values, where  the  keys  are  event  types
197       (e.g.: creation, oom) or "default" and the value is a duration. Default
198       is applied to all non-specified event types
199
200
201       --event_storage_event_limit="default=100000"
202           Max number of events to store (per type). Value is  a  comma  sepa‐
203       rated  list  of  key values, where the keys are event types (e.g.: cre‐
204       ation, oom) or "default" and  the  value  is  an  integer.  Default  is
205       applied to all non-specified event types
206
207
208       --global_housekeeping_interval=0
209           Interval between global housekeepings
210
211
212       --housekeeping_interval=0
213           Interval between container housekeepings
214
215
216       --httptest.serve=""
217           if non-empty, httptest.NewServer serves on this address and blocks
218
219
220       --insecure-skip-tls-verify=false
221           If true, the server's certificate will not be checked for validity.
222       This will make your HTTPS connections insecure
223
224
225       --kubeconfig=""
226           Path to the kubeconfig file to use for CLI requests.
227
228
229       --log-flush-frequency=0
230           Maximum number of seconds between log flushes
231
232
233       --log_backtrace_at=:0
234           when logging hits line file:N, emit a stack trace
235
236
237       --log_cadvisor_usage=false
238           Whether to log the usage of the cAdvisor container
239
240
241       --log_dir=""
242           If non-empty, write log files in this directory
243
244
245       --logtostderr=true
246           log to standard error instead of files
247
248
249       --machine_id_file="/etc/machine-id,/var/lib/dbus/machine-id"
250           Comma-separated list of files to  check  for  machine-id.  Use  the
251       first one that exists.
252
253
254       --match-server-version=false
255           Require server version to match client version
256
257
258       -n, --namespace=""
259           If present, the namespace scope for this CLI request
260
261
262       --request-timeout="0"
263           The  length  of  time  to  wait before giving up on a single server
264       request. Non-zero values should contain a corresponding time unit (e.g.
265       1s, 2m, 3h). A value of zero means don't timeout requests.
266
267
268       -s, --server=""
269           The address and port of the Kubernetes API server
270
271
272       --stderrthreshold=2
273           logs at or above this threshold go to stderr
274
275
276       --storage_driver_buffer_duration=0
277           Writes  in  the  storage driver will be buffered for this duration,
278       and committed to the non memory backends as a single transaction
279
280
281       --storage_driver_db="cadvisor"
282           database name
283
284
285       --storage_driver_host="localhost:8086"
286           database host:port
287
288
289       --storage_driver_password="root"
290           database password
291
292
293       --storage_driver_secure=false
294           use secure connection with database
295
296
297       --storage_driver_table="stats"
298           table name
299
300
301       --storage_driver_user="root"
302           database username
303
304
305       --token=""
306           Bearer token for authentication to the API server
307
308
309       --user=""
310           The name of the kubeconfig user to use
311
312
313       -v, --v=0
314           log level for V logs
315
316
317       --version=false
318           Print version information and quit
319
320
321       --vmodule=
322           comma-separated list of pattern=N settings for  file-filtered  log‐
323       ging
324
325
326

SEE ALSO

328       oc-adm-policy(1),
329
330
331

HISTORY

333       June 2016, Ported from the Kubernetes man-doc generator
334
335
336
337Openshift                  Openshift CLI User Manuals         OC ADM POLICY(1)
Impressum