<p>I am looking for a way to create/retrieve/update/delete a user in Kubernetes, such that I can allow him certain stuff via RoleBindings.</p>
<p>Everything I have found is more or less manual work on the master node. However, I imagine a service deployed in Kubernetes I could call via an API to do the magic for me without doing any manual work. Is such a thing available?</p>

tobias
<p>From <a href="https://kubernetes.io/docs/reference/access-authn-authz/authentication/#users-in-kubernetes" rel="nofollow noreferrer">https://kubernetes.io/docs/reference/access-authn-authz/authentication/#users-in-kubernetes</a></p>
<blockquote>
<p>All Kubernetes clusters have two categories of users: service accounts
managed by Kubernetes, and normal users.</p>
<p>Kubernetes does not have objects which represent
normal user accounts. Normal users cannot be added to a cluster
through an API call.</p>
<p>Even though a normal user cannot be added via an API call, any user
that presents a valid certificate signed by the cluster's certificate
authority (CA) is considered authenticated.</p>
</blockquote>
<p>So there is no API call to create normal user. However you can create service accounts that can have RoleBindings <a href="https://kubernetes.io/docs/reference/access-authn-authz/rbac/#role-binding-examples" rel="nofollow noreferrer">bound</a> to them.</p>
<p>Another possibility is to create TLS certificate, sign it with Kubernetes cluster CA (using <a href="https://kubernetes.io/docs/reference/access-authn-authz/certificate-signing-requests/" rel="nofollow noreferrer">CSR</a>s) and use it as a &quot;normal user&quot;.</p>
