Notes

• If you bind a role in multiple namespaces, reusing the same binding name is fine because each RoleBinding is namespace-scoped.

• If you need reusable access policies for custom resources, extend the aggregated user facing roles or create your own ClusterRole .

• If the user should receive access through a group, bind the group and put that group in the certificate subject O field