1OC CREATE(1)                       June 2016                      OC CREATE(1)
2
3
4

NAME

6       oc  create  clusterrolebinding - Create a ClusterRoleBinding for a par‐
7       ticular ClusterRole
8
9
10

SYNOPSIS

12       oc create clusterrolebinding [OPTIONS]
13
14
15

DESCRIPTION

17       Create a ClusterRoleBinding for a particular ClusterRole.
18
19
20

OPTIONS

22       --allow-missing-template-keys=true
23           If true, ignore any errors in templates when a field or map key  is
24       missing  in  the  template.  Only applies to golang and jsonpath output
25       formats.
26
27
28       --clusterrole=""
29           ClusterRole this ClusterRoleBinding should reference
30
31
32       --dry-run=false
33           If true, only print the object that would be sent, without  sending
34       it.
35
36
37       --generator="clusterrolebinding.rbac.authorization.k8s.io/v1alpha1"
38           The name of the API generator to use.
39
40
41       --group=[]
42           Groups to bind to the role
43
44
45       -o, --output=""
46           Output  format. One of: json|yaml|name|template|go-template|go-tem‐
47       plate-file|templatefile|jsonpath|jsonpath-file.
48
49
50       --save-config=false
51           If true, the configuration of current object will be saved  in  its
52       annotation.  Otherwise,  the annotation will be unchanged. This flag is
53       useful when you want to perform kubectl apply on  this  object  in  the
54       future.
55
56
57       --serviceaccount=[]
58           Service  accounts  to  bind  to  the  role,  in  the format <names‐
59       pace>:<name>
60
61
62       --template=""
63           Template string or path to template file  to  use  when  -o=go-tem‐
64       plate,  -o=go-template-file.  The template format is golang templates [
65http://golang.org/pkg/text/template/#pkg-overview⟩].
66
67
68       --validate=false
69           If true, use a schema to validate the input before sending it
70
71
72

OPTIONS INHERITED FROM PARENT COMMANDS

74       --allow_verification_with_non_compliant_keys=false
75           Allow  a  SignatureVerifier  to  use  keys  which  are  technically
76       non-compliant with RFC6962.
77
78
79       --alsologtostderr=false
80           log to standard error as well as files
81
82
83       --application_metrics_count_limit=100
84           Max number of application metrics to store (per container)
85
86
87       --as=""
88           Username to impersonate for the operation
89
90
91       --as-group=[]
92           Group  to  impersonate for the operation, this flag can be repeated
93       to specify multiple groups.
94
95
96       --azure-container-registry-config=""
97           Path to the file containing Azure container registry  configuration
98       information.
99
100
101       --boot_id_file="/proc/sys/kernel/random/boot_id"
102           Comma-separated  list  of files to check for boot-id. Use the first
103       one that exists.
104
105
106       --cache-dir="/builddir/.kube/http-cache"
107           Default HTTP cache directory
108
109
110       --certificate-authority=""
111           Path to a cert file for the certificate authority
112
113
114       --client-certificate=""
115           Path to a client certificate file for TLS
116
117
118       --client-key=""
119           Path to a client key file for TLS
120
121
122       --cloud-provider-gce-lb-src-cidrs=130.211.0.0/22,209.85.152.0/22,209.85.204.0/22,35.191.0.0/16
123           CIDRs opened in GCE firewall for LB traffic proxy  health checks
124
125
126       --cluster=""
127           The name of the kubeconfig cluster to use
128
129
130       --container_hints="/etc/cadvisor/container_hints.json"
131           location of the container hints file
132
133
134       --containerd="unix:///var/run/containerd.sock"
135           containerd endpoint
136
137
138       --context=""
139           The name of the kubeconfig context to use
140
141
142       --default-not-ready-toleration-seconds=300
143           Indicates    the    tolerationSeconds   of   the   toleration   for
144       notReady:NoExecute that is added by default to every pod that does  not
145       already have such a toleration.
146
147
148       --default-unreachable-toleration-seconds=300
149           Indicates  the  tolerationSeconds  of  the  toleration for unreach‐
150       able:NoExecute that is added by default to  every  pod  that  does  not
151       already have such a toleration.
152
153
154       --docker="unix:///var/run/docker.sock"
155           docker endpoint
156
157
158       --docker-tls=false
159           use TLS to connect to docker
160
161
162       --docker-tls-ca="ca.pem"
163           path to trusted CA
164
165
166       --docker-tls-cert="cert.pem"
167           path to client certificate
168
169
170       --docker-tls-key="key.pem"
171           path to private key
172
173
174       --docker_env_metadata_whitelist=""
175           a  comma-separated  list of environment variable keys that needs to
176       be collected for docker containers
177
178
179       --docker_only=false
180           Only report docker containers in addition to root stats
181
182
183       --docker_root="/var/lib/docker"
184           DEPRECATED: docker root is read from docker info (this is  a  fall‐
185       back, default: /var/lib/docker)
186
187
188       --enable_load_reader=false
189           Whether to enable cpu load reader
190
191
192       --event_storage_age_limit="default=24h"
193           Max length of time for which to store events (per type). Value is a
194       comma separated list of key values, where  the  keys  are  event  types
195       (e.g.: creation, oom) or "default" and the value is a duration. Default
196       is applied to all non-specified event types
197
198
199       --event_storage_event_limit="default=100000"
200           Max number of events to store (per type). Value is  a  comma  sepa‐
201       rated  list  of  key values, where the keys are event types (e.g.: cre‐
202       ation, oom) or "default" and  the  value  is  an  integer.  Default  is
203       applied to all non-specified event types
204
205
206       --global_housekeeping_interval=0
207           Interval between global housekeepings
208
209
210       --housekeeping_interval=0
211           Interval between container housekeepings
212
213
214       --insecure-skip-tls-verify=false
215           If true, the server's certificate will not be checked for validity.
216       This will make your HTTPS connections insecure
217
218
219       --kubeconfig=""
220           Path to the kubeconfig file to use for CLI requests.
221
222
223       --log-flush-frequency=0
224           Maximum number of seconds between log flushes
225
226
227       --log_backtrace_at=:0
228           when logging hits line file:N, emit a stack trace
229
230
231       --log_cadvisor_usage=false
232           Whether to log the usage of the cAdvisor container
233
234
235       --log_dir=""
236           If non-empty, write log files in this directory
237
238
239       --logtostderr=true
240           log to standard error instead of files
241
242
243       --machine_id_file="/etc/machine-id,/var/lib/dbus/machine-id"
244           Comma-separated list of files to  check  for  machine-id.  Use  the
245       first one that exists.
246
247
248       --match-server-version=false
249           Require server version to match client version
250
251
252       -n, --namespace=""
253           If present, the namespace scope for this CLI request
254
255
256       --request-timeout="0"
257           The  length  of  time  to  wait before giving up on a single server
258       request. Non-zero values should contain a corresponding time unit (e.g.
259       1s, 2m, 3h). A value of zero means don't timeout requests.
260
261
262       -s, --server=""
263           The address and port of the Kubernetes API server
264
265
266       --stderrthreshold=2
267           logs at or above this threshold go to stderr
268
269
270       --storage_driver_buffer_duration=0
271           Writes  in  the  storage driver will be buffered for this duration,
272       and committed to the non memory backends as a single transaction
273
274
275       --storage_driver_db="cadvisor"
276           database name
277
278
279       --storage_driver_host="localhost:8086"
280           database host:port
281
282
283       --storage_driver_password="root"
284           database password
285
286
287       --storage_driver_secure=false
288           use secure connection with database
289
290
291       --storage_driver_table="stats"
292           table name
293
294
295       --storage_driver_user="root"
296           database username
297
298
299       --token=""
300           Bearer token for authentication to the API server
301
302
303       --user=""
304           The name of the kubeconfig user to use
305
306
307       -v, --v=0
308           log level for V logs
309
310
311       --version=false
312           Print version information and quit
313
314
315       --vmodule=
316           comma-separated list of pattern=N settings for  file-filtered  log‐
317       ging
318
319
320

EXAMPLE

322                # Create a ClusterRoleBinding for user1, user2, and group1 using the cluster-admin ClusterRole
323                oc create clusterrolebinding cluster-admin --clusterrole=cluster-admin --user=user1 --user=user2 --group=group1
324
325
326
327

SEE ALSO

329       oc-create(1),
330
331
332

HISTORY

334       June 2016, Ported from the Kubernetes man-doc generator
335
336
337
338Openshift                  Openshift CLI User Manuals             OC CREATE(1)
Impressum