$linuxjunkies
>

ClusterRole

also: ClusterRole (Kubernetes)

A Kubernetes resource that defines a set of permissions applicable across an entire cluster, allowing users or service accounts to perform specific actions on cluster-wide resources.

ClusterRole is a Kubernetes API object that specifies a collection of permissions granting access to cluster-scoped resources and actions. Unlike Role, which is namespaced, a ClusterRole applies to all namespaces and cluster-wide objects.

ClusterRoles define what actions (verbs) can be performed on which resources. Common verbs include get, list, create, delete, and watch. Resources can be nodes, persistent volumes, storage classes, or any cluster-level object.

Example: A ClusterRole might grant permissions to view all pods across every namespace, or to manage cluster nodes. ClusterRoles must be bound to users or service accounts using a ClusterRoleBinding to take effect.

Related terms