CKA 준비 (28) ServiceAccount Cluster Role binding

이 게시물은 아래 강의를 참고 하였습니다.
참고 강의 https://www.youtube.com/watch?v=KdATmTulf7s&list=PLApuRlvrZKojqx9-wIvWP3MPtgy2B372f&index=1

 

 

 

 

문제)

- Create a new ClusterRole named deployment-clusterrole, which only allows to create the following resource types: Deployment StatefulSet DaemonSet

- Create a new ServiceAccount named cicd-token in the existing in the existing namespace apps.

- Bind the new Cluster Role deployment-clusterrole to the new ServiceAccount cicd-token, limited to the namespace apps.

 

풀이)

 

1. Service Account 생성

https://kubernetes.io/docs/reference/generated/kubectl/kubectl-commands#-em-rolebinding-em-

$ kubectl create serviceaccount cicd-token -n apps

Service Account 가 생성되었는지 확인

2. ClusterRole 생성

https://kubernetes.io/docs/reference/access-authn-authz/rbac/#kubectl-create-clusterrole

 

\

$ kubectl create clusterrole deployment-clusterrole --verb=create --resource=Deployment,statefulset,daemonSet -n apps

 

ClusterRole 이 생성되었다.

3. ClusterRole binding

https://kubernetes.io/docs/reference/access-authn-authz/rbac/#kubectl-create-rolebinding

 

kubectl create clusterrolebinding deployment-clusterrole-binding --clusterrole=deployment-clusterrole --serviceaccount=apps:cicd-token -n apps

정상적으로 Rolebinding이 된 것을 확인할 수 있다.