This message was deleted.

Bare Kubernetes clusters don’t really have a concept of a user. Or are you talking about Rancher?

I’m talking about rke2. Need RBAC functionality.

Then you're going to have to create and distribute your own client certificates. The username and group are determined by the CN and O in the certificates subject. The groups get bound to rbac roles, but the username is basically just for your reference, there is no actual user resource.

how? do you have documents?