← kubectl Advanced620 / 640

easykubectl

Create a ClusterRole that allows reading secrets across all namespaces

command

kubectl create clusterrole SECRET_READER --verb=get,list --resource=secrets

also accepted

kubectl create clusterrolekubectl create clusterrole SECRET_READER --verb

Command breakdown

Part of the Kubernetes CLI (kubectl) — kubectl Advanced category.

kubectlcreateclusterroleSECRET_READER--verb=get,list--resource=secrets

Flag	Purpose
`--verb`	Set to: get,list
`--resource`	Set to: secrets

More kubectl Advanced commands

Create a Role that allows getting and listing pods in the current namespacekubectl create role POD_READER --verb=get,list --resource=pods
Bind a Role to a user so that user gains those permissions in the current namespacekubectl create rolebinding ALICE_READER --role=pod-reader --user=alice
Bind a ClusterRole to a user, granting those permissions across the entire clusterkubectl create clusterrolebinding ADMIN_BINDING --clusterrole=cluster-admin --user=admin
Apply a NetworkPolicy manifest from a file to restrict pod-to-pod traffickubectl apply -f network-policy.yaml
List all CustomResourceDefinitions installed in the clusterkubectl get crds
Create a service account in a specific namespacekubectl create serviceaccount APP_SA -n prod
List all RoleBindings across every namespace in the clusterkubectl get rolebindings --all-namespaces
Check whether user bob can delete deployments in the staging namespacekubectl auth can-i delete deployments --as=bob -n staging

See all kubectl Advanced commands →

← prev next →

More kubectl Advanced commands →Full cheat sheet →

Test your recall — not just your reading.

Practice with interactive quiz →