role&binding-imperative.md

Question - Role & binding

Create a service account name seminar-sa on the namespace seminar

Create a new role named k8s-seminar in the namespace seminar which only allows create and update operations only on resources of type pods and deployments

Create a new rolebinding name k8s-seminar-bind binding to the newly created role to the service account created previously named seminar-sa.

Option 1 - Imperative

1 - Create a namespace

kubectl create ns seminar

2 - Create service account

kubectl -n seminar create sa seminar-sa

3 - Create role

kubectl -n seminar create role k8s-seminar --verb=create,update --resource=pods,deployments

4 - Create rolebinding

kubectl -n seminar create rolebinding k8s-seminar-bind --role=k8s-seminar --serviceaccount=seminar:seminar-sa