kubectl auth reconcile
Reconciles rules for RBAC Role, RoleBinding, ClusterRole, and ClusterRole binding objects
Options
| Name | Description |
|---|---|
--allow-missing-template-keys | If true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats |
--dry-run <Strategy> | Must be "none", "server", or "client". If client strategy, only print the object that would be sent, without sending it. If server strategy, submit server-side request without persisting the resource |
-f, --filename <File> | Filename, directory, or URL to files identifying the resource |
-k, --kustomize <Kustomize Dir> | Process the kustomization directory. This flag can't be used together with -f or -R |
-o, --output <Output Format> | Output format. One of: json|yaml|name|go-template|go-template-file|template|templatefile|jsonpath|jsonpath-file |
-R, --recursive | Process the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory |
--template <arg> | Template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview] |
--remove-extra-permissions | If true, removes extra permissions added to roles |
--remove-extra-subjects | If true, removes extra subjects added to rolebindings |
--show-managed-fields | If true, keep the managedFields when printing objects in JSON or YAML format |