17.4. 将未经身份验证的组添加到集群角色中

流程

1. 创建名为 add-<cluster_role>-unauth.yaml 的 YAML 文件，并添加以下内容：

   apiVersion: rbac.authorization.k8s.io/v1
   kind: ClusterRoleBinding
   metadata:
    annotations:
      rbac.authorization.kubernetes.io/autoupdate: "true"
    name: <cluster_role>access-unauthenticated
   roleRef:
    apiGroup: rbac.authorization.k8s.io
    kind: ClusterRole
    name: <cluster_role>
   subjects:
    - apiGroup: rbac.authorization.k8s.io
      kind: Group
      name: system:unauthenticated

   Copy to Clipboard Toggle word wrap

2. 运行以下命令来应用配置：

   $ oc apply -f add-<cluster_role>.yaml

   Copy to Clipboard Toggle word wrap