ClusterRoleBinding

Default version: rbac.authorization.k8s.io/v1

• Official Documentation

• PHP K8s RBAC Rule Instance Documentation

Example

use RenokiCo\PhpK8s\Kinds\K8sPod;

$rule = K8s::rule()
    ->core()
    ->addResources([K8sPod::class, 'configmaps'])
    ->addResourceNames(['pod-name', 'configmap-name'])
    ->addVerbs(['get', 'list', 'watch']);

$role = $this->cluster
    ->clusterRole()
    ->setName('admin')
    ->setLabels(['tier' => 'backend'])
    ->addRules([$rule])
    ->create();

$subject = K8s::subject()
    ->setApiGroup('rbac.authorization.k8s.io')
    ->setKind('User')
    ->setName('user-1');

$crb = $this->cluster
    ->clusterRoleBinding()
    ->setName('user-binding')
    ->setRole($role, 'rbac.authorization.k8s.io')
    ->setSubjects([$subject])
    ->create();

Getting Subjects

You can get the subjects as RenokiCo\PhpK8s\Instances\Subject instances:

foreach ($crb->getSubjects() as $subject) {
    //
}