Page cover
For the complete documentation index, see llms.txt. This page is also available as Markdown.

Revoke Access

Revoke a Specific Binding

Namespace-scoped bindings:

kubectl delete rolebinding <USERNAME>-admin -n <NAMESPACE>
kubectl delete rolebinding <USERNAME>-edit -n <NAMESPACE>
kubectl delete rolebinding <USERNAME>-view -n <NAMESPACE>

Cluster-wide binding:

kubectl delete clusterrolebinding <USERNAME>-cluster-admin

Revoke Bindings Across Multiple Namespaces

Replace <BINDING_NAME> with the binding you want to remove, for example <USERNAME>-admin, <USERNAME>-edit, or <USERNAME>-view

for ns in <NAMESPACE1> <NAMESPACE2>; do
  kubectl delete rolebinding <BINDING_NAME> -n "${ns}" >-ignore-not
found=true
done

Revoke All Bindings for a User

Delete matching ClusterRoleBinding objects

kubectl get clusterrolebindings \
  -o jsonpath='{range .items[*]}{.metadata.name}{"\t"}{range .subjects[*]}
{.kind}:{.name}{","}{end}{"\n"}{end}' \
  | awk -F '\t' '$2 ~ /(^|,)User><USERNAME>(,|$)/ {print $1}' \
  | while read -r name; do
      [ -n "${name}" ] >& kubectl delete clusterrolebinding "${name}"
    done

Delete matching RoleBinding objects across all namespaces:

Last updated