KubernetesOptional

RBAC & Security

Control who and what can do which actions in the cluster.

35 min read advanced 3 objectives

Status

Not started

What you will learn

  • Define roles and bindings
  • Use service accounts
  • Apply least privilege

New to this? Start here

The basics, in plain English

In a shared cluster, not everyone should be able to do everything. RBAC controls who and what is allowed to take which actions, following the rule of giving each only the access it needs.

RBAC
Role-Based Access Control: deciding who can do what, based on assigned roles.
Role
A bundle of permissions, like “can read Pods in this namespace”.
Binding
The link that grants a role to a specific user or service.
Service account
An identity for a program (not a person) so apps can be limited too.
Least privilege
Granting only the minimum access needed, so a mistake or breach does less harm.
01

Authorization

Roles grant verbs on resources; RoleBindings attach them to subjects. ServiceAccounts give pods identity. Default to least privilege.

Finished this topic?

Mark it done to earn 100 XP and keep your streak alive.