kubectl auth reconcile

Reconciles rules for RBAC Role, RoleBinding, ClusterRole, and ClusterRole binding objects


--allow-missing-template-keysIf true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats
--dry-run <Strategy>Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource
-f, --filename <File>Filename, directory, or URL to files identifying the resource
-k, --kustomize <Kustomize Dir>Process the kustomization directory. This flag can't be used together with -f or -R
-o, --output <Output Format>Output format. One of: json|yaml|name|go-template|go-template-file|template|templatefile|jsonpath|jsonpath-file
-R, --recursiveProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory
--template <arg>Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview]
--remove-extra-permissionsIf true, removes extra permissions added to roles
--remove-extra-subjectsIf true, removes extra subjects added to rolebindings
--show-managed-fieldsIf true, keep the managedFields when printing objects in JSON or YAML format