Kubernetes RBAC

Kubernetes RBAC uses the rbac.authorization.k8s.io API Group

https://kubernetes.io/docs/reference/access-authn-authz/rbac/

• kubectl create role
• kubectl create clusterrole
• kubectl create rolebinding
• kubectl create clusterrolebinding

• kubectl auth reconcile
• kubectl auth can-i

Roles

• https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles

cluster-admin

admin

edit

view

Related terms

• kubectl create
• Attribute-based access control (ABAC)
• kubectl get role
• CKA 1.23: Manage role based access control (RBAC)
• CKA 1.20
• kubectl create serviceaccount
• ACK
• Amazon EKS Authorization

News

• March 2017 Kubernetes 1.6

See also

• Kubernetes roles, kubectl get [ roles | clusterroles | clusterrolebindings ], kubectl create rolebinding, K8s Cluster roles
• kubectl auth [ can-i | reconcile ]
• Kubernetes RBAC kubectl auth, kubectl auth can-i, kubectl auth reconcile kubectl create [ role | clusterrole | clusterrolebinding | rolebinding | serviceaccount ], groups:, Kubernetes RBAC good practices, kube2iam, K8s Cluster roles, rbac.authorization.k8s.io, system:
• RBAC, ABAC, Kubernetes RBAC, ArgoCD RBAC

https://www.mirantis.com/blog/whats-new-kubernetes-1-6-focus-stability/