1OC CREATE(1)                       June 2016                      OC CREATE(1)
2
3
4

NAME

6       oc  create  clusterrolebinding - Create a ClusterRoleBinding for a par‐
7       ticular ClusterRole
8
9
10

SYNOPSIS

12       oc create clusterrolebinding [OPTIONS]
13
14
15

DESCRIPTION

17       Create a ClusterRoleBinding for a particular ClusterRole.
18
19
20

OPTIONS

22       --allow-missing-template-keys=true
23           If true, ignore any errors in templates when a field or map key  is
24       missing  in  the  template.  Only applies to golang and jsonpath output
25       formats.
26
27
28       --clusterrole=""
29           ClusterRole this ClusterRoleBinding should reference
30
31
32       --dry-run=false
33           If true, only print the object that would be sent, without  sending
34       it.
35
36
37       --generator="clusterrolebinding.rbac.authorization.k8s.io/v1alpha1"
38           The name of the API generator to use.
39
40
41       --group=[]
42           Groups to bind to the role
43
44
45       -o, --output=""
46           Output  format. One of: json|yaml|name|template|go-template|go-tem‐
47       plate-file|templatefile|jsonpath|jsonpath-file.
48
49
50       --save-config=false
51           If true, the configuration of current object will be saved  in  its
52       annotation.  Otherwise,  the annotation will be unchanged. This flag is
53       useful when you want to perform kubectl apply on  this  object  in  the
54       future.
55
56
57       --serviceaccount=[]
58           Service  accounts  to  bind  to  the  role,  in  the format <names‐
59       pace>:<name>
60
61
62       --template=""
63           Template string or path to template file  to  use  when  -o=go-tem‐
64       plate,  -o=go-template-file.  The template format is golang templates [
65http://golang.org/pkg/text/template/#pkg-overview⟩].
66
67
68       --validate=false
69           If true, use a schema to validate the input before sending it
70
71
72

OPTIONS INHERITED FROM PARENT COMMANDS

74       --allow_verification_with_non_compliant_keys=false
75           Allow  a  SignatureVerifier  to  use  keys  which  are  technically
76       non-compliant with RFC6962.
77
78
79       --alsologtostderr=false
80           log to standard error as well as files
81
82
83       --application_metrics_count_limit=100
84           Max number of application metrics to store (per container)
85
86
87       --as=""
88           Username to impersonate for the operation
89
90
91       --as-group=[]
92           Group  to  impersonate for the operation, this flag can be repeated
93       to specify multiple groups.
94
95
96       --azure-container-registry-config=""
97           Path to the file containing Azure container registry  configuration
98       information.
99
100
101       --boot_id_file="/proc/sys/kernel/random/boot_id"
102           Comma-separated  list  of files to check for boot-id. Use the first
103       one that exists.
104
105
106       --cache-dir="/builddir/.kube/http-cache"
107           Default HTTP cache directory
108
109
110       --certificate-authority=""
111           Path to a cert file for the certificate authority
112
113
114       --client-certificate=""
115           Path to a client certificate file for TLS
116
117
118       --client-key=""
119           Path to a client key file for TLS
120
121
122       --cloud-provider-gce-lb-src-cidrs=130.211.0.0/22,209.85.152.0/22,209.85.204.0/22,35.191.0.0/16
123           CIDRs opened in GCE firewall for LB traffic proxy  health checks
124
125
126       --cluster=""
127           The name of the kubeconfig cluster to use
128
129
130       --container_hints="/etc/cadvisor/container_hints.json"
131           location of the container hints file
132
133
134       --containerd="unix:///var/run/containerd.sock"
135           containerd endpoint
136
137
138       --context=""
139           The name of the kubeconfig context to use
140
141
142       --default-not-ready-toleration-seconds=300
143           Indicates    the    tolerationSeconds   of   the   toleration   for
144       notReady:NoExecute that is added by default to every pod that does  not
145       already have such a toleration.
146
147
148       --default-unreachable-toleration-seconds=300
149           Indicates  the  tolerationSeconds  of  the  toleration for unreach‐
150       able:NoExecute that is added by default to  every  pod  that  does  not
151       already have such a toleration.
152
153
154       --docker="unix:///var/run/docker.sock"
155           docker endpoint
156
157
158       --docker-tls=false
159           use TLS to connect to docker
160
161
162       --docker-tls-ca="ca.pem"
163           path to trusted CA
164
165
166       --docker-tls-cert="cert.pem"
167           path to client certificate
168
169
170       --docker-tls-key="key.pem"
171           path to private key
172
173
174       --docker_env_metadata_whitelist=""
175           a  comma-separated  list of environment variable keys that needs to
176       be collected for docker containers
177
178
179       --docker_only=false
180           Only report docker containers in addition to root stats
181
182
183       --docker_root="/var/lib/docker"
184           DEPRECATED: docker root is read from docker info (this is  a  fall‐
185       back, default: /var/lib/docker)
186
187
188       --enable_load_reader=false
189           Whether to enable cpu load reader
190
191
192       --event_storage_age_limit="default=24h"
193           Max length of time for which to store events (per type). Value is a
194       comma separated list of key values, where  the  keys  are  event  types
195       (e.g.: creation, oom) or "default" and the value is a duration. Default
196       is applied to all non-specified event types
197
198
199       --event_storage_event_limit="default=100000"
200           Max number of events to store (per type). Value is  a  comma  sepa‐
201       rated  list  of  key values, where the keys are event types (e.g.: cre‐
202       ation, oom) or "default" and  the  value  is  an  integer.  Default  is
203       applied to all non-specified event types
204
205
206       --global_housekeeping_interval=0
207           Interval between global housekeepings
208
209
210       --housekeeping_interval=0
211           Interval between container housekeepings
212
213
214       --httptest.serve=""
215           if non-empty, httptest.NewServer serves on this address and blocks
216
217
218       --insecure-skip-tls-verify=false
219           If true, the server's certificate will not be checked for validity.
220       This will make your HTTPS connections insecure
221
222
223       --kubeconfig=""
224           Path to the kubeconfig file to use for CLI requests.
225
226
227       --log-flush-frequency=0
228           Maximum number of seconds between log flushes
229
230
231       --log_backtrace_at=:0
232           when logging hits line file:N, emit a stack trace
233
234
235       --log_cadvisor_usage=false
236           Whether to log the usage of the cAdvisor container
237
238
239       --log_dir=""
240           If non-empty, write log files in this directory
241
242
243       --logtostderr=true
244           log to standard error instead of files
245
246
247       --machine_id_file="/etc/machine-id,/var/lib/dbus/machine-id"
248           Comma-separated list of files to  check  for  machine-id.  Use  the
249       first one that exists.
250
251
252       --match-server-version=false
253           Require server version to match client version
254
255
256       -n, --namespace=""
257           If present, the namespace scope for this CLI request
258
259
260       --request-timeout="0"
261           The  length  of  time  to  wait before giving up on a single server
262       request. Non-zero values should contain a corresponding time unit (e.g.
263       1s, 2m, 3h). A value of zero means don't timeout requests.
264
265
266       -s, --server=""
267           The address and port of the Kubernetes API server
268
269
270       --stderrthreshold=2
271           logs at or above this threshold go to stderr
272
273
274       --storage_driver_buffer_duration=0
275           Writes  in  the  storage driver will be buffered for this duration,
276       and committed to the non memory backends as a single transaction
277
278
279       --storage_driver_db="cadvisor"
280           database name
281
282
283       --storage_driver_host="localhost:8086"
284           database host:port
285
286
287       --storage_driver_password="root"
288           database password
289
290
291       --storage_driver_secure=false
292           use secure connection with database
293
294
295       --storage_driver_table="stats"
296           table name
297
298
299       --storage_driver_user="root"
300           database username
301
302
303       --token=""
304           Bearer token for authentication to the API server
305
306
307       --user=""
308           The name of the kubeconfig user to use
309
310
311       -v, --v=0
312           log level for V logs
313
314
315       --version=false
316           Print version information and quit
317
318
319       --vmodule=
320           comma-separated list of pattern=N settings for  file-filtered  log‐
321       ging
322
323
324

EXAMPLE

326                # Create a ClusterRoleBinding for user1, user2, and group1 using the cluster-admin ClusterRole
327                oc create clusterrolebinding cluster-admin --clusterrole=cluster-admin --user=user1 --user=user2 --group=group1
328
329
330
331

SEE ALSO

333       oc-create(1),
334
335
336

HISTORY

338       June 2016, Ported from the Kubernetes man-doc generator
339
340
341
342Openshift                  Openshift CLI User Manuals             OC CREATE(1)
Impressum