Kubernetes RBAC
Authorization by binding subjects (users, groups, ServiceAccounts) to Roles that whitelist verbs on API resources; Role/RoleBinding scope to a namespace while ClusterRole/ClusterRoleBinding span the cluster. Purely additive — there are no deny rules, so least privilege means granting narrowly, not blocking broadly.
This Concept is waiting for its first lesson!
Authorization by binding subjects (users, groups, ServiceAccounts) to Roles that whitelist verbs on API resources; Role/RoleBinding scope to a namespace while ClusterRole/ClusterRoleBinding span the cluster. Purely additive — there are no deny rules, so least privilege means granting narrowly, not blocking broadly.
Are you a teacher? Sign in to start contributing.
Sign In