Skip to content
Captain's Academy0
← Kubernetes sea chart
Island 6 · Security · Port 6.12

RBAC: Role & RoleBinding

Ask the Captain
Instagram
dev-user manages pods in dev, and nothing else.
You'll learn to

give a user read-only pods in one namespace; test with auth can-i

Recap

  1. 1Role = API groups + resources + verbs, in one namespace
  2. 2RoleBinding gives it to users, groups, service accounts
  3. 3No deny rules: anything not listed is forbidden
Check yourself

A Role allows get and list on pods. The user runs kubectl delete pod. What happens?

6.12

Stamp this lesson

Watched it and passed the check? Mark it in your logbook.