Product Docs
- Overview
- How to Use
- Using the Tag History API
- Compare Images with chainctl
- Retrieve an Image's SBOM
- Image Update Considerations
- Minimize CVE Risk
- Debugging
- FAQs
- kubeflow-centraldashboard
- temporal-admin-tools
- apko
- argo-cli
- argo-exec
- argo-workflowcontroller
- argocd
- argocd-repo-server
- aspnet-runtime
- atlantis
- aws-cli
- aws-ebs-csi-driver
- aws-efs-csi-driver
- aws-for-fluent-bit
- aws-load-balancer-controller
- bank-vaults
- bash
- bazel
- boring-registry
- buck2
- buildkit
- busybox
- caddy
- cadvisor
- calico
- calico-cni
- calico-csi
- calico-kube-controllers
- calico-node
- calico-node-driver-registrar
- calico-pod2daemon
- calico-pod2daemon-flexvol
- calico-typha
- calicoctl
- cassandra
- cc-dynamic
- cedar
- cert-manager-acmesolver
- cert-manager-cainjector
- cert-manager-controller
- cert-manager-webhook
- cfssl
- cilium-agent
- cilium-hubble-relay
- cilium-hubble-ui
- cilium-hubble-ui-backend
- cilium-operator-generic
- clang
- cluster-autoscaler
- cluster-proportional-autoscaler
- conda
- configmap-reload
- consul
- coredns
- cosign
- crane
- crossplane
- crossplane-aws
- crossplane-aws-cloudfront
- crossplane-aws-cloudwatchlogs
- crossplane-aws-dynamodb
- crossplane-aws-ec2
- crossplane-aws-eks
- crossplane-aws-firehose
- crossplane-aws-iam
- crossplane-aws-kms
- crossplane-aws-lambda
- crossplane-aws-rds
- crossplane-aws-s3
- crossplane-aws-sns
- crossplane-aws-sqs
- crossplane-azure
- crossplane-azure-authorization
- crossplane-azure-managedidentity
- crossplane-azure-sql
- crossplane-azure-storage
- crossplane-xfn
- ctlog-trillian-ctserver
- curl
- dask-gateway
- dask-gateway-dask-gateway
- dask-gateway-dask-gateway-server
- dask-gateway-server
- deno
- dependency-track
- dex
- dive
- dotnet-runtime
- dotnet-sdk
- dynamic-localpv-provisioner
- envoy
- envoy-ratelimit
- erlang
- etcd
- external-dns
- external-secrets
- falcoctl
- ffmpeg
- fluent-bit
- fluentd
- flux
- flux-helm-controller
- flux-image-automation-controller
- flux-image-reflector-controller
- flux-kustomize-controller
- flux-notification-controller
- flux-source-controller
- fulcio
- gatekeeper
- gcc-glibc
- git
- gitlab-exporter
- gitlab-kas
- gitlab-pages
- gitlab-shell
- gitness
- glibc-dynamic
- go
- google-cloud-sdk
- graalvm-native
- gradle
- grype
- guacamole-server
- haproxy
- haproxy-ingress
- helm
- helm-chartmuseum
- helm-controller
- http-echo
- hugo
- influxdb
- ingress-nginx-controller
- ip-masq-agent
- istio-install-cni
- istio-operator
- istio-pilot
- istio-proxy
- jdk
- jdk-lts
- jenkins
- jre
- jre-lts
- k3s
- k3s-allinone
- k3s-embedded
- k8s-sidecar
- k8sgpt
- k8sgpt-operator
- kafka
- karpenter
- keda
- keda-adapter
- keda-admission-webhooks
- keycloak
- ko
- kor
- kube-bench
- kube-downscaler
- kube-fluentd-operator
- kube-logging-operator
- kube-logging-operator-fluentd
- kube-state-metrics
- kubectl
- kubeflow-jupyter-web-app
- kubeflow-katib-controller
- kubeflow-katib-db-manager
- kubeflow-katib-earlystopping-medianstop
- kubeflow-katib-file-metrics-collector
- kubeflow-katib-suggestion-darts
- kubeflow-katib-suggestion-goptuna
- kubeflow-katib-suggestion-hyperband
- kubeflow-katib-suggestion-hyperopt
- kubeflow-katib-suggestion-optuna
- kubeflow-katib-suggestion-pbt
- kubeflow-katib-suggestion-skopt
- kubeflow-pipelines-api-server
- kubeflow-pipelines-cache-deployer
- kubeflow-pipelines-cache-server
- kubeflow-pipelines-frontend
- kubeflow-pipelines-metadata-writer
- kubeflow-pipelines-persistenceagent
- kubeflow-pipelines-scheduledworkflow
- kubeflow-pipelines-viewer-crd-controller
- kubeflow-volumes-web-app
- kubernetes-csi-external-attacher
- kubernetes-csi-external-provisioner
- kubernetes-csi-external-resizer
- kubernetes-csi-external-snapshot-controller
- kubernetes-csi-external-snapshot-validation-webhook
- kubernetes-csi-external-snapshotter
- kubernetes-csi-livenessprobe
- kubernetes-csi-node-driver-registrar
- kubernetes-dashboard
- kubernetes-dns-node-cache
- kubernetes-event-exporter
- kubernetes-ingress-defaultbackend
- kubewatch
- kyverno
- kyverno-background-controller
- kyverno-cleanup-controller
- kyverno-cli
- kyverno-policy-reporter
- kyverno-policy-reporter-plugin
- kyverno-policy-reporter-reporter
- kyverno-policy-reporter-ui
- kyverno-reports-controller
- loki
- mariadb
- maven
- mdbook
- meilisearch
- melange
- memcached
- memcached-exporter
- memcached-exporter-bitnami
- metacontroller
- metrics-server
- minio
- minio-client
- nats
- netcat
- newrelic-fluent-bit-output
- newrelic-infrastructure-bundle
- newrelic-k8s-events-forwarder
- newrelic-kube-events
- newrelic-kubernetes
- newrelic-prometheus
- newrelic-prometheus-configurator
- nfs-subdir-external-provisioner
- nginx
- node
- node-lts
- node-problem-detector
- nodetaint
- notification-controller
- ntia-conformance-checker
- ntpd-rs
- nvidia-device-plugin
- oauth2-proxy
- openai
- opensearch
- opentelemetry-collector-contrib
- opentf
- opentofu
- paranoia
- pgbouncer
- php
- postgres
- powershell
- prometheus
- prometheus-adapter
- prometheus-alertmanager
- prometheus-cloudwatch-exporter
- prometheus-config-reloader
- prometheus-elasticsearch-exporter
- prometheus-mongodb-exporter
- prometheus-mysqld-exporter
- prometheus-node-exporter
- prometheus-operator
- prometheus-postgres-exporter
- prometheus-pushgateway
- prometheus-pushgateway-bitnami
- prometheus-redis-exporter
- prometheus-statsd-exporter
- promtail
- proxysql
- pulumi
- python
- qdrant
- r-base
- rabbitmq
- rabbitmq-cluster-operator
- rabbitmq-messaging-topology-operator
- redis
- redis-cluster-bitnami
- redis-sentinel
- redis-sentinel-bitnami
- redis-server-bitnami
- rekor-backfill-redis
- rekor-cli
- rekor-server
- rqlite
- ruby
- rust
- secrets-store-csi-driver
- secrets-store-csi-driver-provider-gcp
- semgrep
- sigstore-policy-controller
- sigstore-scaffolding-cloudsqlproxy
- sigstore-scaffolding-ctlog-createctconfig
- sigstore-scaffolding-ctlog-managectroots
- sigstore-scaffolding-ctlog-verifyfulcio
- sigstore-scaffolding-fulcio-createcerts
- sigstore-scaffolding-getoidctoken
- sigstore-scaffolding-rekor-createsecret
- sigstore-scaffolding-trillian-createdb
- sigstore-scaffolding-trillian-createtree
- sigstore-scaffolding-trillian-updatetree
- sigstore-scaffolding-tsa-createcertchain
- sigstore-scaffolding-tuf-createsecret
- sigstore-scaffolding-tuf-server
- skaffold
- slim-toolkit-debug
- smarter-device-manager
- solr
- source-controller
- spark-operator
- spire-agent
- spire-oidc-discovery-provider
- spire-server
- stakater-reloader
- static
- stunnel
- tekton-chains
- tekton-cli
- tekton-controller
- tekton-entrypoint
- tekton-events
- tekton-nop
- tekton-resolvers
- tekton-sidecarlogresults
- tekton-webhook
- tekton-workingdirinit
- telegraf
- temporal-ui-server
- terraform
- thanos
- thanos-operator
- tigera-operator
- timestamp-authority-cli
- timestamp-authority-server
- timoni
- tomcat
- traefik
- trillian-logserver
- trillian-logsigner
- trino
- trust-manager
- vault
- vault-k8s
- vector
- vela-cli
- vertical-pod-autoscaler-admission-controller
- vertical-pod-autoscaler-recommender
- vertical-pod-autoscaler-updater
- vt
- wait-for-it
- wasmer
- wasmtime
- wavefront-proxy
- wazero
- weaviate
- wolfi-base
- zig
- zookeeper
- zot
- chainctl
- chainctl auth
- chainctl auth configure-docker
- chainctl auth login
- chainctl auth logout
- chainctl auth status
- chainctl clusters
- chainctl clusters cidrs
- chainctl clusters cidrs list
- chainctl clusters describe
- chainctl clusters discover
- chainctl clusters install
- chainctl clusters list
- chainctl clusters open
- chainctl clusters print-config
- chainctl clusters profiles
- chainctl clusters profiles list
- chainctl clusters records
- chainctl clusters records list
- chainctl clusters records vulns
- chainctl clusters records vulns describe
- chainctl clusters records vulns list
- chainctl clusters search
- chainctl clusters uninstall
- chainctl clusters update
- chainctl clusters workloads
- chainctl clusters workloads list
- chainctl config
- chainctl config edit
- chainctl config reset
- chainctl config save
- chainctl config set
- chainctl config unset
- chainctl config validate
- chainctl config view
- chainctl events
- chainctl events subscriptions
- chainctl events subscriptions create
- chainctl events subscriptions delete
- chainctl events subscriptions list
- chainctl iam
- chainctl iam account-associations
- chainctl iam account-associations check
- chainctl iam account-associations check aws
- chainctl iam account-associations check gcp
- chainctl iam account-associations describe
- chainctl iam account-associations set
- chainctl iam account-associations set aws
- chainctl iam account-associations set gcp
- chainctl iam account-associations unset
- chainctl iam account-associations unset aws
- chainctl iam account-associations unset gcp
- chainctl iam groups
- chainctl iam groups create
- chainctl iam groups delete
- chainctl iam groups describe
- chainctl iam groups list
- chainctl iam groups update
- chainctl iam identities
- chainctl iam identities create
- chainctl iam identities create github
- chainctl iam identities create gitlab
- chainctl iam identities delete
- chainctl iam identities describe
- chainctl iam identities list
- chainctl iam identities update
- chainctl iam identity-providers
- chainctl iam identity-providers create
- chainctl iam identity-providers delete
- chainctl iam identity-providers list
- chainctl iam identity-providers update
- chainctl iam invites
- chainctl iam invites create
- chainctl iam invites delete
- chainctl iam invites list
- chainctl iam role-bindings
- chainctl iam role-bindings create
- chainctl iam role-bindings delete
- chainctl iam role-bindings list
- chainctl iam role-bindings update
- chainctl iam roles
- chainctl iam roles capabilities
- chainctl iam roles capabilities list
- chainctl iam roles create
- chainctl iam roles delete
- chainctl iam roles list
- chainctl iam roles update
- chainctl images
- chainctl images diff
- chainctl images list
- chainctl images repos
- chainctl images repos list
- chainctl policies
- chainctl policies apply
- chainctl policies delete
- chainctl policies edit
- chainctl policies list
- chainctl policies update
- chainctl policies versions
- chainctl policies versions activate
- chainctl policies versions diff
- chainctl policies versions list
- chainctl policies versions view
- chainctl policies view
- chainctl sigstore
- chainctl sigstore ca
- chainctl sigstore ca create
- chainctl sigstore ca delete
- chainctl sigstore ca describe
- chainctl sigstore ca list
- chainctl sigstore env
- chainctl update
- chainctl version
Open Source
Education
chainctl iam role-bindings update
chainctl iam role-bindings update
Update a role-binding.
chainctl iam role-bindings update BINDING_ID [--role=ROLE] [--identity=IDENTITY] [--output table|json|id]
Examples
# Update the role an identity is bound to
chainctl iam role-bindings update fb694596eb1678321f94eec283e1e0be690f655c/a2973bac66ebfde3 --role=editor
# Update the identity bound to a role
chainctl iam role-bindings update fb694596eb1678321f94eec283e1e0be690f655c/a2973bac66ebfde3 --identity=support-identity
Options
-h, --help help for update
--identity string The name or ID of the identity to bind.
--role string The name or ID of the role to bind to the identity.
-y, --yes Automatic yes to prompts; assume "yes" as answer to all prompts and run non-interactively.
Options inherited from parent commands
--api string The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
--audience string The Chainguard token audience to request. (default "https://console-api.enforce.dev")
--config string A specific chainctl config file.
--console string The url of the Chainguard platform Console. (default "https://console.enforce.dev")
--issuer string The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
-o, --output string Output format. One of: ["", "json", "id", "table", "terse", "tree", "wide"]
--timestamp-authority string The url of the Chainguard Timestamp Authority endpoint. (default "https://tsa.enforce.dev")
-v, --v int Set the log verbosity level.
SEE ALSO
- chainctl iam role-bindings - IAM role-bindings resource interactions.
Last updated: 2023-12-04 18:58