1KUBERNETES(1)                      Jan 2015                      KUBERNETES(1)
2
3
4

NAME

6       kubectl create rolebinding - Create a RoleBinding for a particular Role
7       or ClusterRole
8
9
10

SYNOPSIS

12       kubectl create rolebinding [OPTIONS]
13
14
15

DESCRIPTION

17       Create a RoleBinding for a particular Role or ClusterRole.
18
19
20

OPTIONS

22       --allow-missing-template-keys=true
23           If true, ignore any errors in templates when a field or map key  is
24       missing  in  the  template.  Only applies to golang and jsonpath output
25       formats.
26
27
28       --clusterrole=""
29           ClusterRole this RoleBinding should reference
30
31
32       --dry-run=false
33           If true, only print the object that would be sent, without  sending
34       it.
35
36
37       --generator="rolebinding.rbac.authorization.k8s.io/v1alpha1"
38           The name of the API generator to use.
39
40
41       --group=[]
42           Groups to bind to the role
43
44
45       -o, --output=""
46           Output    format.    One   of:   json|yaml|name|go-template|go-tem‐
47       plate-file|template|templatefile|jsonpath|jsonpath-file.
48
49
50       --role=""
51           Role this RoleBinding should reference
52
53
54       --save-config=false
55           If true, the configuration of current object will be saved  in  its
56       annotation.  Otherwise,  the annotation will be unchanged. This flag is
57       useful when you want to perform kubectl apply on  this  object  in  the
58       future.
59
60
61       --serviceaccount=[]
62           Service  accounts  to  bind  to  the  role,  in  the format <names‐
63       pace>:<name>
64
65
66       --template=""
67           Template string or path to template file  to  use  when  -o=go-tem‐
68       plate,  -o=go-template-file.  The template format is golang templates [
69http://golang.org/pkg/text/template/#pkg-overview⟩].
70
71
72       --validate=true
73           If true, use a schema to validate the input before sending it
74
75
76

OPTIONS INHERITED FROM PARENT COMMANDS

78       --alsologtostderr=false
79           log to standard error as well as files
80
81
82       --application-metrics-count-limit=100
83           Max number of application metrics to store (per container)
84
85
86       --as=""
87           Username to impersonate for the operation
88
89
90       --as-group=[]
91           Group to impersonate for the operation, this flag can  be  repeated
92       to specify multiple groups.
93
94
95       --azure-container-registry-config=""
96           Path  to the file containing Azure container registry configuration
97       information.
98
99
100       --boot-id-file="/proc/sys/kernel/random/boot_id"
101           Comma-separated list of files to check for boot-id. Use  the  first
102       one that exists.
103
104
105       --cache-dir="/builddir/.kube/http-cache"
106           Default HTTP cache directory
107
108
109       --certificate-authority=""
110           Path to a cert file for the certificate authority
111
112
113       --client-certificate=""
114           Path to a client certificate file for TLS
115
116
117       --client-key=""
118           Path to a client key file for TLS
119
120
121       --cloud-provider-gce-lb-src-cidrs=130.211.0.0/22,209.85.152.0/22,209.85.204.0/22,35.191.0.0/16
122           CIDRs opened in GCE firewall for LB traffic proxy  health checks
123
124
125       --cluster=""
126           The name of the kubeconfig cluster to use
127
128
129       --container-hints="/etc/cadvisor/container_hints.json"
130           location of the container hints file
131
132
133       --containerd="/run/containerd/containerd.sock"
134           containerd endpoint
135
136
137       --containerd-namespace="k8s.io"
138           containerd namespace
139
140
141       --context=""
142           The name of the kubeconfig context to use
143
144
145       --default-not-ready-toleration-seconds=300
146           Indicates   the   tolerationSeconds   of   the    toleration    for
147       notReady:NoExecute  that is added by default to every pod that does not
148       already have such a toleration.
149
150
151       --default-unreachable-toleration-seconds=300
152           Indicates the tolerationSeconds  of  the  toleration  for  unreach‐
153       able:NoExecute  that  is  added  by  default to every pod that does not
154       already have such a toleration.
155
156
157       --docker="unix:///var/run/docker.sock"
158           docker endpoint
159
160
161       --docker-env-metadata-whitelist=""
162           a comma-separated list of environment variable keys that  needs  to
163       be collected for docker containers
164
165
166       --docker-only=false
167           Only report docker containers in addition to root stats
168
169
170       --docker-root="/var/lib/docker"
171           DEPRECATED:  docker  root is read from docker info (this is a fall‐
172       back, default: /var/lib/docker)
173
174
175       --docker-tls=false
176           use TLS to connect to docker
177
178
179       --docker-tls-ca="ca.pem"
180           path to trusted CA
181
182
183       --docker-tls-cert="cert.pem"
184           path to client certificate
185
186
187       --docker-tls-key="key.pem"
188           path to private key
189
190
191       --enable-load-reader=false
192           Whether to enable cpu load reader
193
194
195       --event-storage-age-limit="default=0"
196           Max length of time for which to store events (per type). Value is a
197       comma  separated  list  of  key  values, where the keys are event types
198       (e.g.: creation, oom) or "default" and the value is a duration. Default
199       is applied to all non-specified event types
200
201
202       --event-storage-event-limit="default=0"
203           Max  number  of  events to store (per type). Value is a comma sepa‐
204       rated list of key values, where the keys are event  types  (e.g.:  cre‐
205       ation,  oom)  or  "default"  and  the  value  is an integer. Default is
206       applied to all non-specified event types
207
208
209       --global-housekeeping-interval=1m0s
210           Interval between global housekeepings
211
212
213       --housekeeping-interval=10s
214           Interval between container housekeepings
215
216
217       --insecure-skip-tls-verify=false
218           If true, the server's certificate will not be checked for validity.
219       This will make your HTTPS connections insecure
220
221
222       --kubeconfig=""
223           Path to the kubeconfig file to use for CLI requests.
224
225
226       --log-backtrace-at=:0
227           when logging hits line file:N, emit a stack trace
228
229
230       --log-cadvisor-usage=false
231           Whether to log the usage of the cAdvisor container
232
233
234       --log-dir=""
235           If non-empty, write log files in this directory
236
237
238       --log-file=""
239           If non-empty, use this log file
240
241
242       --log-file-max-size=1800
243           Defines the maximum size a log file can grow to. Unit is megabytes.
244       If the value is 0, the maximum file size is unlimited.
245
246
247       --log-flush-frequency=5s
248           Maximum number of seconds between log flushes
249
250
251       --logtostderr=true
252           log to standard error instead of files
253
254
255       --machine-id-file="/etc/machine-id,/var/lib/dbus/machine-id"
256           Comma-separated list of files to  check  for  machine-id.  Use  the
257       first one that exists.
258
259
260       --match-server-version=false
261           Require server version to match client version
262
263
264       -n, --namespace=""
265           If present, the namespace scope for this CLI request
266
267
268       --password=""
269           Password for basic authentication to the API server
270
271
272       --profile="none"
273           Name of profile to capture. One of (none|cpu|heap|goroutine|thread‐
274       create|block|mutex)
275
276
277       --profile-output="profile.pprof"
278           Name of the file to write the profile to
279
280
281       --request-timeout="0"
282           The length of time to wait before giving  up  on  a  single  server
283       request. Non-zero values should contain a corresponding time unit (e.g.
284       1s, 2m, 3h). A value of zero means don't timeout requests.
285
286
287       -s, --server=""
288           The address and port of the Kubernetes API server
289
290
291       --skip-headers=false
292           If true, avoid header prefixes in the log messages
293
294
295       --skip-log-headers=false
296           If true, avoid headers when opening log files
297
298
299       --stderrthreshold=2
300           logs at or above this threshold go to stderr
301
302
303       --storage-driver-buffer-duration=1m0s
304           Writes in the storage driver will be buffered  for  this  duration,
305       and committed to the non memory backends as a single transaction
306
307
308       --storage-driver-db="cadvisor"
309           database name
310
311
312       --storage-driver-host="localhost:8086"
313           database host:port
314
315
316       --storage-driver-password="root"
317           database password
318
319
320       --storage-driver-secure=false
321           use secure connection with database
322
323
324       --storage-driver-table="stats"
325           table name
326
327
328       --storage-driver-user="root"
329           database username
330
331
332       --token=""
333           Bearer token for authentication to the API server
334
335
336       --update-machine-info-interval=5m0s
337           Interval between machine info updates.
338
339
340       --user=""
341           The name of the kubeconfig user to use
342
343
344       --username=""
345           Username for basic authentication to the API server
346
347
348       -v, --v=0
349           number for the log level verbosity
350
351
352       --version=false
353           Print version information and quit
354
355
356       --vmodule=
357           comma-separated  list  of pattern=N settings for file-filtered log‐
358       ging
359
360
361

EXAMPLE

363                # Create a RoleBinding for user1, user2, and group1 using the admin ClusterRole
364                kubectl create rolebinding admin --clusterrole=admin --user=user1 --user=user2 --group=group1
365
366
367
368

SEE ALSO

370       kubectl-create(1),
371
372
373

HISTORY

375       January 2015, Originally compiled by Eric Paris (eparis at  redhat  dot
376       com)  based  on the kubernetes source material, but hopefully they have
377       been automatically generated since!
378
379
380
381Eric Paris                  kubernetes User Manuals              KUBERNETES(1)
Impressum