Which Kubernetes object is used to grant permissions to acluster-wide resource?

In Kubernetes RBAC,ClusterRoleBindingis the mechanism for granting permissions to resources that are not namespace-scoped. The documentation integrated into VCF 9.0 explains: “ClusterRoleBinding binds a user, group, or service account to a ClusterRole, granting cluster-wide permissions to non-namespaced resources such as nodes, storage classes, or persistent volumes.”

A RoleBinding grants access to namespace-scoped resources. RoleReference is a field within a RoleBinding/ClusterRoleBinding object, not a standalone object. ClusterRoleAccess is not a valid Kubernetes construct.

Thus, to assign permissions at a cluster-wide level, the correct object isClusterRoleBinding.