#
#  Author: Hari Sekhon
#  Date: [% DATE  # 2020-02-15 12:37:50 +0000 (Sat, 15 Feb 2020) %]
#
#  vim:ts=2:sts=2:sw=2:et
#
#  https://github.com/harisekhon/Kubernetes-configs
#
#  License: see accompanying Hari Sekhon LICENSE file
#
#  If you're using my code you're welcome to connect with me on LinkedIn
#  and optionally send me feedback to help improve or steer this or other code I publish
#
#  https://www.linkedin.com/in/HariSekhon
#

# ============================================================================ #
#         P o d   S e c u r i t y   P o l i c y   R o l e b i n d i n g
# ============================================================================ #

# https://kubernetes.io/docs/concepts/security/pod-security-standards/

# https://kubernetes.io/docs/concepts/policy/pod-security-policy/

# https://kubernetes.io/docs/tasks/configure-pod-container/security-context/

# https://kubernetes.io/docs/reference/access-authn-authz/rbac/#rolebinding-example


---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  name: restricted-pod-rolebinding
  namespace: default
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: restricted-pods-role
subjects:
  # Example: All service accounts in default namespace
  - apiGroup: rbac.authorization.k8s.io
    kind: Group
    name: system:serviceaccounts
