From the course: Certified Kubernetes Security Specialist (CKS) Cert Prep

Unlock this course with a free trial

Join today to access over 24,900 courses taught by industry experts.

Understanding Kubernetes RBAC

Understanding Kubernetes RBAC

- Role-based access control in Kubernetes requires that you understand a number of different objects. Now, the first object we've talked a little bit about before, it's the subject, and that can be user, it can be group, as well as a service account. Then you have the various resources. Now, these can be pods, nodes, ConfigMaps, secrets, deployments, you name it. And then after that, you have the operations, and that's the verbs. So these are the things that you can do on these various resources. So the subject defines who or what, the resources define the actual resource that you want to operate on. And then the actual operations themselves will define what it is you can do. And as you can see, there follows very standard restful approaches, list, get, put, et cetera. Now, resources and namespaces are how we define various segmentation, and to be able to set aside different resources within Kubernetes. So the namespace is designed to be able to take segments and isolate various…

Contents