Cluster role binding

Cluster role binding defines the binding relationship between cluster roles and service accounts, thus controlling the operation privileges of service accounts. Cluster role bindings for multi-cluster resources support binding to clusters and batch creation of the same cluster role bindings in a cluster.

Entry: In the cloud management platform click on the top left corner of navigation menu, and click “Containers/Multi-Cluster Resources/Cluster Role Binding” menu item in the left menu bar that pops up to enter the Cluster Role Binding page.

New cluster role binding

This function is used to create a new cluster role binding for multiple clusters. Before creating a new cluster role binding for multiple clusters, please create a multi-cluster cluster role first.

1. On the cluster role binding page, click the “New” button at the top of the list to enter the New Cluster Role Binding page.
2. Set the following parameters.
   • Name: Set the name of the cluster role binding.
   • Cluster Role: Select a specific cluster role.
   • Subject: Select the type of service account to be bound, including User, Group.
   • Subject Name: Set the specific user, group.
3. Click the “OK” button to complete the operation.

Delete cluster role binding

This function is used to delete the cluster role binding. When the cluster role binding has been bound to a cluster, it cannot be deleted.

Individual deletion

1. On the cluster role binding page, click the “Delete” button in the action column on the right side of the cluster role binding to bring up the action confirmation dialog box.
2. Click the “OK” button to complete the operation.

Batch Delete

1. Select one or more cluster role bindings in the list, and click the “Delete” button at the top of the list to bring up the operation confirmation dialog.
2. Click the “OK” button to complete the operation.

View Cluster Role Binding Details

This function is used to view the details of the cluster role binding.

1. On the Cluster role binding page, click the Cluster role binding name item to enter the Cluster role binding details page.
2. View the following information: Cloud ID, ID, name, domain, project, status, roleref, subjects, created at, updated at, and description.

Bound Cluster Resource Management

This function is used to associate cluster role bindings to or unbind from a cluster.

Bound to cluster

This function is used to associate cluster role bindings to a cluster and create the corresponding cluster role bindings on the corresponding cluster.

1. On the cluster role binding page, click the cluster role binding name item to enter the cluster role binding details page.
2. Click the Bound Cluster Resources tab to enter the Bound Resources page.
3. Click the “Bind to Cluster” button to bring up the Bind to Cluster dialog box.
4. Select the cluster and click the “OK” button to complete the operation.

Unbind

This function is used to unbind multi-cluster role bindings from the cluster. Currently, after unbinding, the cluster will not delete the corresponding cluster role bindings.

1. On the cluster role binding page, click the cluster role binding name item to enter the cluster role binding details page.
2. Click the Bound Cluster Resources tab to enter the Bound Resources page.
3. Click the “Unbind” button on the right column of the cluster to bring up the operation confirmation dialog box.
4. Click “OK” button to complete the operation.

View Operation Log

This function is used to view the operation logs related to multi-cluster role binding.

1. On the Cluster role binding page, click the Cluster role binding name item to enter the Cluster role binding details page.
2. Click the Operation Log tab to enter the Operation Log page.
   • Load More Logs: In the Operation Logs page, the list shows 20 operation logs by default. To view more operation logs, click the “Load More” button to get more logs.
   • View Log Details: Click the “View” button on the right column of the operation log to view the log details. Copy details are supported.
   • View logs of specified time period: If you want to view the operation logs of a certain time period, set the specific date in the start date and end date at the top right of the list to query the log information of the specified time period.
   • Export logs: Currently, only the logs displayed on this page are supported to be exported. Click the upper-right corner of icon, set the export data column in the pop-up export data dialog, and click the “OK” button to export the logs.