ClusterRole [api_object]ai-synthesized · conf 0.82
ClusterRole is a cluster level, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding or ClusterRoleBinding.
rbacsecurity
A ClusterRole is a set of permissions that can be applied to a cluster.
Why it matters ClusterRoles define what actions can be performed on a cluster, enabling fine-grained access control.
Key facts - Defined in the RBAC API (io.k8s.api.rbac.v1.ClusterRole) - Can be used to grant permissions to users or service accounts
Common pitfalls - Care must be taken when granting ClusterRoles, as they can have far-reaching implications for cluster security - Inadequate ClusterRole definitions can lead to over-permissioning and increased risk of unauthorized access
Related ClusterRoleBinding, ServiceAccount, User
Sources
swagger.json — “io.k8s.api.rbac.v1.ClusterRole”