RBAC
Part of the Kubernetes course
Every command you have run in this course went out as you, the cluster administrator, and the cluster said yes to all of them. That is fine while you are learning alone. It stops being fine the moment a second person joins, or the moment an application inside the cluster needs to talk to the Kubernetes API itself.
Consider a monitoring agent that lists Pods so it can scrape metrics from them. If it runs with your credentials, then a bug in that agent, or a compromise of the image it runs, can delete every Deployment in the cluster. It never needed that power. It needed to list Pods. ...
Want to learn Kubernetes RBAC in a real environment?
Click below, get a fresh Linux box with Kubernetes ready to go, and work through RBAC hands-on with an AI tutor that knows your code.
Start this lessonRBACWhat you'll learn
- ServiceAccount
- Role vs ClusterRole
- RoleBinding
- Least privilege
- Verbs and resources
Read this lesson in your language
All lessons in this course
14 lessons- 1What is Kubernetes25 min
- 2Your First Pod30 min
- 3Deployments and ReplicaSets35 min
- 4Services35 min
- 5Probes and Self-Healing35 min
- 6ConfigMaps and Secrets35 min
- 7Volumes and Persistent Storage35 min
- 8Namespaces and Labels25 min
- 9Ingress35 min
- 10Helm Basics35 min
- 11Scaling and HPA30 min
- 12RBAC35 min
- 13Observability30 min
- 14Capstone: Deploy a Stack60 min
Explore other courses
