KUBERNETES(1) kubernetes KUBERNETES(1) (NAME) kubectl-create-clusterrole - (ClusterRole) (SYNOPSIS) kubectl create clusterrole [OPTIONS] (DESCRIPTION) (ClusterRole). (OPTIONS) --aggregation-rule= (aggregation label selector) ClusterRole. --allow-missing-template-keys=true true map . golang jsonpath . --dry-run="none" "none" "server" "client" . client . server . --field-manager="kubectl-create" . --non-resource-url=[] URL . -o, --output="" . : (json, yaml, kyaml, name, go-template, go-template- file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath- file). --resource=[] . --resource-name=[] () . --save-config=false true annotation . annotation . kubectl apply . --show-managed-fields=false true JSON YAML managedFields . --template="" -o=go-template -o=go-template-file. golang [http://golang.org/pkg/text/template/#pkg-overview]. --validate="strict" strict ( true) warn ignore ( false) . "true" "strict" . ServerSideFieldValidation api-server . "warn" API server "ignore" . "false" "ignore" . --verb=[] ( ) . (OPTIONS INHERITED FROM PARENT COMMANDS) --as="" (impersonate) . (service account) namespace . --as-group=[] . --as-uid="" UID . --as-user-extra=[] . --cache-dir="/home/username/.kube/cache" --certificate-authority="" (certificate authority) --client-certificate="" TLS --client-key="" TLS --cluster="" kubeconfig --context="" kubeconfig --disable-compression=false true --insecure-skip-tls-verify=false true . HTTPS --kubeconfig="" kubeconfig CLI. --kuberc="" kuberc (preferences). export feature gate KUBECTL_KUBERC=false KUBERC=off . --match-server-version=false -n, --namespace="" namespace CLI --password="" (basic authentication) API --profile="none" . (none|cpu|heap|goroutine|threadcreate|block|mutex|trace) --profile-output="profile.pprof" --request-timeout="0" . ( 1s 2m 3h). ( timeout). -s, --server="" Kubernetes API --tls-server-name="" . hostname --token="" Bearer API --user="" kubeconfig --username="" API --version=false --version --version=raw --version=vX.Y.Z... --warnings-as-errors=false (EXAMPLES) # "pod-reader" "get" "watch" "list" pod kubectl create clusterrole pod-reader --verb=get,list,watch --resource=pods # "pod-reader" ResourceName kubectl create clusterrole pod-reader --verb=get --resource=pods --resource-name=readablepod --resource-name=anotherpod # "foo" API (API Group) kubectl create clusterrole foo --verb=get,list,watch --resource=rs.apps # "foo" (SubResource) kubectl create clusterrole foo --verb=get,list,watch --resource=pods,pods/status # "foo" NonResourceURL kubectl create clusterrole "foo" --verb=get --non-resource-url=/logs/* # "monitoring" AggregationRule kubectl create clusterrole monitoring --aggregation-rule="rbac.example.com/aggregate-to-monitoring=true" (SEE ALSO) kubectl-create(1) (HISTORY) Eric Paris (eparis at redhat dot com) kubernetes ! Eric Paris Jan 2015 KUBERNETES(1)