What you will learn
- Define roles and bindings
- Use service accounts
- Apply least privilege
New to this? Start here
The basics, in plain English
In a shared cluster, not everyone should be able to do everything. RBAC controls who and what is allowed to take which actions, following the rule of giving each only the access it needs.
- RBAC
- Role-Based Access Control: deciding who can do what, based on assigned roles.
- Role
- A bundle of permissions, like “can read Pods in this namespace”.
- Binding
- The link that grants a role to a specific user or service.
- Service account
- An identity for a program (not a person) so apps can be limited too.
- Least privilege
- Granting only the minimum access needed, so a mistake or breach does less harm.
01
Authorization
Roles grant verbs on resources; RoleBindings attach them to subjects. ServiceAccounts give pods identity. Default to least privilege.
Finished this topic?
Mark it done to earn 100 XP and keep your streak alive.