1OC CREATE(1)                       June 2016                      OC CREATE(1)
2
3
4

NAME

6       oc  create  rolebinding - Create a RoleBinding for a particular Role or
7       ClusterRole
8
9
10

SYNOPSIS

12       oc create rolebinding [OPTIONS]
13
14
15

DESCRIPTION

17       Create a RoleBinding for a particular Role or ClusterRole.
18
19
20

OPTIONS

22       --allow-missing-template-keys=true
23           If true, ignore any errors in templates when a field or map key  is
24       missing  in  the  template.  Only applies to golang and jsonpath output
25       formats.
26
27
28       --clusterrole=""
29           ClusterRole this RoleBinding should reference
30
31
32       --dry-run=false
33           If true, only print the object that would be sent, without  sending
34       it.
35
36
37       --generator="rolebinding.rbac.authorization.k8s.io/v1alpha1"
38           The name of the API generator to use.
39
40
41       --group=[]
42           Groups to bind to the role
43
44
45       -o, --output=""
46           Output format. One of: json|yaml|name|templatefile|template|go-tem‐
47       plate|go-template-file|jsonpath-file|jsonpath.
48
49
50       --role=""
51           Role this RoleBinding should reference
52
53
54       --save-config=false
55           If true, the configuration of current object will be saved  in  its
56       annotation.  Otherwise,  the annotation will be unchanged. This flag is
57       useful when you want to perform kubectl apply on  this  object  in  the
58       future.
59
60
61       --serviceaccount=[]
62           Service  accounts  to  bind  to  the  role,  in  the format <names‐
63       pace>:<name>
64
65
66       --template=""
67           Template string or path to template file  to  use  when  -o=go-tem‐
68       plate,  -o=go-template-file.  The template format is golang templates [
69http://golang.org/pkg/text/template/#pkg-overview⟩].
70
71
72       --validate=false
73           If true, use a schema to validate the input before sending it
74
75
76

OPTIONS INHERITED FROM PARENT COMMANDS

78       --allow_verification_with_non_compliant_keys=false
79           Allow  a  SignatureVerifier  to  use  keys  which  are  technically
80       non-compliant with RFC6962.
81
82
83       --alsologtostderr=false
84           log to standard error as well as files
85
86
87       --application_metrics_count_limit=100
88           Max number of application metrics to store (per container)
89
90
91       --as=""
92           Username to impersonate for the operation
93
94
95       --as-group=[]
96           Group  to  impersonate for the operation, this flag can be repeated
97       to specify multiple groups.
98
99
100       --azure-container-registry-config=""
101           Path to the file containing Azure container registry  configuration
102       information.
103
104
105       --boot_id_file="/proc/sys/kernel/random/boot_id"
106           Comma-separated  list  of files to check for boot-id. Use the first
107       one that exists.
108
109
110       --cache-dir="/builddir/.kube/http-cache"
111           Default HTTP cache directory
112
113
114       --certificate-authority=""
115           Path to a cert file for the certificate authority
116
117
118       --client-certificate=""
119           Path to a client certificate file for TLS
120
121
122       --client-key=""
123           Path to a client key file for TLS
124
125
126       --cloud-provider-gce-lb-src-cidrs=130.211.0.0/22,209.85.152.0/22,209.85.204.0/22,35.191.0.0/16
127           CIDRs opened in GCE firewall for LB traffic proxy  health checks
128
129
130       --cluster=""
131           The name of the kubeconfig cluster to use
132
133
134       --container_hints="/etc/cadvisor/container_hints.json"
135           location of the container hints file
136
137
138       --containerd="unix:///var/run/containerd.sock"
139           containerd endpoint
140
141
142       --context=""
143           The name of the kubeconfig context to use
144
145
146       --default-not-ready-toleration-seconds=300
147           Indicates    the    tolerationSeconds   of   the   toleration   for
148       notReady:NoExecute that is added by default to every pod that does  not
149       already have such a toleration.
150
151
152       --default-unreachable-toleration-seconds=300
153           Indicates  the  tolerationSeconds  of  the  toleration for unreach‐
154       able:NoExecute that is added by default to  every  pod  that  does  not
155       already have such a toleration.
156
157
158       --docker="unix:///var/run/docker.sock"
159           docker endpoint
160
161
162       --docker-tls=false
163           use TLS to connect to docker
164
165
166       --docker-tls-ca="ca.pem"
167           path to trusted CA
168
169
170       --docker-tls-cert="cert.pem"
171           path to client certificate
172
173
174       --docker-tls-key="key.pem"
175           path to private key
176
177
178       --docker_env_metadata_whitelist=""
179           a  comma-separated  list of environment variable keys that needs to
180       be collected for docker containers
181
182
183       --docker_only=false
184           Only report docker containers in addition to root stats
185
186
187       --docker_root="/var/lib/docker"
188           DEPRECATED: docker root is read from docker info (this is  a  fall‐
189       back, default: /var/lib/docker)
190
191
192       --enable_load_reader=false
193           Whether to enable cpu load reader
194
195
196       --event_storage_age_limit="default=24h"
197           Max length of time for which to store events (per type). Value is a
198       comma separated list of key values, where  the  keys  are  event  types
199       (e.g.: creation, oom) or "default" and the value is a duration. Default
200       is applied to all non-specified event types
201
202
203       --event_storage_event_limit="default=100000"
204           Max number of events to store (per type). Value is  a  comma  sepa‐
205       rated  list  of  key values, where the keys are event types (e.g.: cre‐
206       ation, oom) or "default" and  the  value  is  an  integer.  Default  is
207       applied to all non-specified event types
208
209
210       --global_housekeeping_interval=0
211           Interval between global housekeepings
212
213
214       --housekeeping_interval=0
215           Interval between container housekeepings
216
217
218       --httptest.serve=""
219           if non-empty, httptest.NewServer serves on this address and blocks
220
221
222       --insecure-skip-tls-verify=false
223           If true, the server's certificate will not be checked for validity.
224       This will make your HTTPS connections insecure
225
226
227       --kubeconfig=""
228           Path to the kubeconfig file to use for CLI requests.
229
230
231       --log-flush-frequency=0
232           Maximum number of seconds between log flushes
233
234
235       --log_backtrace_at=:0
236           when logging hits line file:N, emit a stack trace
237
238
239       --log_cadvisor_usage=false
240           Whether to log the usage of the cAdvisor container
241
242
243       --log_dir=""
244           If non-empty, write log files in this directory
245
246
247       --logtostderr=true
248           log to standard error instead of files
249
250
251       --machine_id_file="/etc/machine-id,/var/lib/dbus/machine-id"
252           Comma-separated list of files to  check  for  machine-id.  Use  the
253       first one that exists.
254
255
256       --match-server-version=false
257           Require server version to match client version
258
259
260       -n, --namespace=""
261           If present, the namespace scope for this CLI request
262
263
264       --request-timeout="0"
265           The  length  of  time  to  wait before giving up on a single server
266       request. Non-zero values should contain a corresponding time unit (e.g.
267       1s, 2m, 3h). A value of zero means don't timeout requests.
268
269
270       -s, --server=""
271           The address and port of the Kubernetes API server
272
273
274       --stderrthreshold=2
275           logs at or above this threshold go to stderr
276
277
278       --storage_driver_buffer_duration=0
279           Writes  in  the  storage driver will be buffered for this duration,
280       and committed to the non memory backends as a single transaction
281
282
283       --storage_driver_db="cadvisor"
284           database name
285
286
287       --storage_driver_host="localhost:8086"
288           database host:port
289
290
291       --storage_driver_password="root"
292           database password
293
294
295       --storage_driver_secure=false
296           use secure connection with database
297
298
299       --storage_driver_table="stats"
300           table name
301
302
303       --storage_driver_user="root"
304           database username
305
306
307       --token=""
308           Bearer token for authentication to the API server
309
310
311       --user=""
312           The name of the kubeconfig user to use
313
314
315       -v, --v=0
316           log level for V logs
317
318
319       --version=false
320           Print version information and quit
321
322
323       --vmodule=
324           comma-separated list of pattern=N settings for  file-filtered  log‐
325       ging
326
327
328

EXAMPLE

330                # Create a RoleBinding for user1, user2, and group1 using the admin ClusterRole
331                oc create rolebinding admin --clusterrole=admin --user=user1 --user=user2 --group=group1
332
333
334
335

SEE ALSO

337       oc-create(1),
338
339
340

HISTORY

342       June 2016, Ported from the Kubernetes man-doc generator
343
344
345
346Openshift                  Openshift CLI User Manuals             OC CREATE(1)
Impressum