kubectl set subject

Update the user, group, or service account in a role binding or cluster role binding kubectl reference

Options

16 in the kubectl reference

--allSelect all resources, in the namespace of the specified resource types

--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template.

--dry-runMust be "none", "server", or "client".

--field-managerName of the manager used to track field ownership.

--filename, -fFilename, directory, or URL to files the resource to update the subjects

--groupGroups to bind to the role

--help, -hhelp for subject

--kustomize, -kProcess the kustomization directory.

--localIf true, set subject will NOT contact api-server but run locally.

--output, -oOutput format.

--recursive, -RProcess the directory used in -f, --filename recursively.

--selector, -lSelector (label query) to filter on, supports '=', '==', '!=', 'in', 'notin'.(e.g. -l key1=value1,key2=value2,key3 in (value3)).

--serviceaccountService accounts to bind to the role

--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format.

--templateTemplate string or path to template file to use when -o=go-template, -o=go-template-file.

--userUsernames to bind to the role