KUBERNETES(1)(kubernetes)                            KUBERNETES(1)(kubernetes)

Eric Paris Jan 2015


NAME
       kubectl set subject - Update the user, group, or service account in a
       role binding or cluster role binding



SYNOPSIS
       kubectl set subject [OPTIONS]



DESCRIPTION
       Update the user, group, or service account in a role binding or cluster
       role binding.



OPTIONS
       --all=false    Select all resources, in the namespace of the specified
       resource types


       --allow-missing-template-keys=true      If true, ignore any errors in
       templates when a field or map key is missing in the template. Only
       applies to golang and jsonpath output formats.


       --dry-run="none"    Must be "none", "server", or "client". If client
       strategy, only print the object that would be sent, without sending it.
       If server strategy, submit server-side request without persisting the
       resource.


       --field-manager="kubectl-set"      Name of the manager used to track
       field ownership.


       -f, --filename=[]   Filename, directory, or URL to files the resource
       to update the subjects


       --group=[]     Groups to bind to the role


       -k, --kustomize=""  Process the kustomization directory. This flag
       can't be used together with -f or -R.


       --local=false  If true, set subject will NOT contact api-server but run
       locally.


       -o, --output=""     Output format. One of: (json, yaml, name, go-
       template, go-template-file, template, templatefile, jsonpath, jsonpath-
       as-json, jsonpath-file).


       -R, --recursive=false    Process the directory used in -f, --filename
       recursively. Useful when you want to manage related manifests organized
       within the same directory.


       -l, --selector=""   Selector (label query) to filter on, supports '=',
       '==', and '!='.(e.g. -l key1=value1,key2=value2). Matching objects must
       satisfy all of the specified label constraints.


       --serviceaccount=[]      Service accounts to bind to the role


       --show-managed-fields=false   If true, keep the managedFields when
       printing objects in JSON or YAML format.


       --template=""  Template string or path to template file to use when
       -o=go-template, -o=go-template-file. The template format is golang
       templates [http://golang.org/pkg/text/template/#pkg-overview].


       --user=[]      Usernames to bind to the role



OPTIONS INHERITED FROM PARENT COMMANDS
       --as=""   Username to impersonate for the operation. User could be a
       regular user or a service account in a namespace.


       --as-group=[]  Group to impersonate for the operation, this flag can be
       repeated to specify multiple groups.


       --as-uid=""    UID to impersonate for the operation.


       --azure-container-registry-config=""    Path to the file containing
       Azure container registry configuration information.


       --cache-dir="/home/username/.kube/cache"     Default cache directory


       --certificate-authority=""    Path to a cert file for the certificate
       authority


       --client-certificate=""  Path to a client certificate file for TLS


       --client-key=""     Path to a client key file for TLS


       --cluster=""   The name of the kubeconfig cluster to use


       --context=""   The name of the kubeconfig context to use


       --disable-compression=false   If true, opt-out of response compression
       for all requests to the server


       --insecure-skip-tls-verify=false   If true, the server's certificate
       will not be checked for validity. This will make your HTTPS connections
       insecure


       --kubeconfig=""     Path to the kubeconfig file to use for CLI
       requests.


       --match-server-version=false  Require server version to match client
       version


       -n, --namespace=""  If present, the namespace scope for this CLI
       request


       --password=""  Password for basic authentication to the API server


       --profile="none"    Name of profile to capture. One of
       (none|cpu|heap|goroutine|threadcreate|block|mutex)


       --profile-output="profile.pprof"   Name of the file to write the
       profile to


       --request-timeout="0"    The length of time to wait before giving up on
       a single server request. Non-zero values should contain a corresponding
       time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout
       requests.


       -s, --server=""     The address and port of the Kubernetes API server


       --tls-server-name=""     Server name to use for server certificate
       validation. If it is not provided, the hostname used to contact the
       server is used


       --token=""     Bearer token for authentication to the API server


       --username=""  Username for basic authentication to the API server


       --version=false     --version, --version=raw prints version information
       and quits; --version=vX.Y.Z... sets the reported version


       --warnings-as-errors=false    Treat warnings received from the server
       as errors and exit with a non-zero exit code



EXAMPLE

                # Update a cluster role binding for serviceaccount1
                kubectl set subject clusterrolebinding admin --serviceaccount=namespace:serviceaccount1

                # Update a role binding for user1, user2, and group1
                kubectl set subject rolebinding admin --user=user1 --user=user2 --group=group1

                # Print the result (in YAML format) of updating rolebinding subjects from a local, without hitting the server
                kubectl create rolebinding admin --role=admin --user=admin -o yaml --dry-run=client | kubectl set subject --local -f - --user=foo -o yaml




SEE ALSO
       kubectl-set(1),



HISTORY
       January 2015, Originally compiled by Eric Paris (eparis at redhat dot
       com) based on the kubernetes source material, but hopefully they have
       been automatically generated since!

Manuals                              User            KUBERNETES(1)(kubernetes)