Reading 24m read

Role-Based Access Control (RBAC)

Secure your Kubernetes cluster with RBAC — create Roles, ClusterRoles, and bind them to users and service accounts.

Full content coming soon. This lesson is being written.

This lesson covers RBAC:

  • RBAC objects: Role, ClusterRole, RoleBinding, ClusterRoleBinding
  • Role vs ClusterRole: namespace-scoped vs cluster-scoped
  • Verbs: get, list, watch, create, update, patch, delete
  • Resource names: fine-grained access to specific objects
  • Aggregated ClusterRoles: extend built-in roles
  • Least-privilege principle in practice
  • Auditing RBAC: kubectl auth can-i
  • Common RBAC patterns: read-only, CI/CD pipeline, namespace admin

Check back soon for the full content.

Next Lesson