kubectl get clusterroles

1 개요

kubectl get clusterrole

kubectl get clusterroles

$ kubectl get clusterrole
NAME                                                                   AGE
admin                                                                  5m
cluster-admin                                                          5m
edit                                                                   5m
system:aggregate-to-admin                                              5m
system:aggregate-to-edit                                               5m
system:aggregate-to-view                                               5m
system:auth-delegator                                                  5m
system:aws-cloud-provider                                              5m
system:basic-user                                                      5m
system:certificates.k8s.io:certificatesigningrequests:nodeclient       5m
system:certificates.k8s.io:certificatesigningrequests:selfnodeclient   5m
system:controller:attachdetach-controller                              5m
system:controller:certificate-controller                               5m
system:controller:clusterrole-aggregation-controller                   5m
system:controller:cronjob-controller                                   5m
system:controller:daemon-set-controller                                5m
system:controller:deployment-controller                                5m
system:controller:disruption-controller                                5m
system:controller:endpoint-controller                                  5m
system:controller:expand-controller                                    5m
system:controller:generic-garbage-collector                            5m
system:controller:horizontal-pod-autoscaler                            5m
system:controller:job-controller                                       5m
system:controller:namespace-controller                                 5m
system:controller:node-controller                                      5m
system:controller:persistent-volume-binder                             5m
system:controller:pod-garbage-collector                                5m
system:controller:pv-protection-controller                             5m
system:controller:pvc-protection-controller                            5m
system:controller:replicaset-controller                                5m
system:controller:replication-controller                               5m
system:controller:resourcequota-controller                             5m
system:controller:route-controller                                     5m
system:controller:service-account-controller                           5m
system:controller:service-controller                                   5m
system:controller:statefulset-controller                               5m
system:controller:ttl-controller                                       5m
system:coredns                                                         5m
system:csi-external-attacher                                           5m
system:csi-external-provisioner                                        5m
system:discovery                                                       5m
system:heapster                                                        5m
system:kube-aggregator                                                 5m
system:kube-controller-manager                                         5m
system:kube-dns                                                        5m
system:kube-scheduler                                                  5m
system:kubelet-api-admin                                               5m
system:node                                                            5m
system:node-bootstrapper                                               5m
system:node-problem-detector                                           5m
system:node-proxier                                                    5m
system:persistent-volume-provisioner                                   5m
system:volume-scheduler                                                5m
view                                                                   5m
weave-net                                                              5m

$ kubectl get clusterrole | awk '{print $1}' | egrep -v ':|-'
NAME
admin
edit
view

$ kubectl get clusterroles -ojson | jq -r '.items[].rules[].verbs[]' | sort | uniq
*
approve
create
delete
deletecollection
get
impersonate
list
patch
proxy
sign
update
use
watch

2 같이 보기

• kubectl get
• kubectl get clusterrole cluster-admin
• kubectl get clusterrolebinding
• kubectl describe clusterrole
• kubectl describe clusterrole system:kube-scheduler
• 쿠버네티스 ClusterRole

3 참고

• https://github.com/kubernetes/kubernetes/blob/v1.5.0/plugin/pkg/auth/authorizer/rbac/bootstrappolicy/policy.go#L71-L147