kubectl create rolebinding
kubectl create rolebinding <name> --role=<role>|--clusterrole=<role> --serviceaccount=<ns>:<name>|--user=<name> [-n ns]
Risk: Careful
What it does
Pins a job card to a person or bot, in one zone.
When to use it
Right after you make a Role. A card does nothing alone.
Example
$ kubectl create rolebinding ci-bot-deployer --role=deployer --serviceaccount=default:ci-botGive the CI bot the deployer card here.
$ kubectl create serviceaccount ci-botFirst, make the bot's badge.
Learn it in: RBAC: roles and bindings · Official docs