[CKA] 13. clusterRole과 serviceAccount를 생성

01. 특정 clusterRole과 serviceAccount를 생성하고 binding 한다. 

 

[solve]

[root@k8s-master ~]# vi 37-test.yaml

apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: deployment-clusterrole
  namespace: app-team1
rules:
- apiGroups: [""]
  resources: ["Deployment", "StatefulSet", "DaemonSet"]
  verbs: ["create"]

--- 

apiVersion: v1
kind: ServiceAccount
metadata:
  annotations:
    kubernetes.io/enforce-mountable-secrets: "true"
  name: ccid-token
  namespace: app-team1

---

apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  name: deployment-clusterrole-binding
  namespace: app-team1
subjects:
- kind: ServiceAccount
  name: ccid-token
roleRef:
  kind: ClusterRole 
  name: deployment-clusterrole

[root@k8s-master ~]# kubectl apply -f 37-test.yaml 
clusterrole.rbac.authorization.k8s.io/deployment-clusterrole created
serviceaccount/ccid-token created
rolebinding.rbac.authorization.k8s.io/deployment-clusterrole-binding created