Difference between revisions of "Kubernetes RBAC"
Jump to navigation
Jump to search
↑ https://www.mirantis.com/blog/whats-new-kubernetes-1-6-focus-stability/
(→Roles) |
|||
| Line 19: | Line 19: | ||
Review https://medium.com/codex/how-to-provide-access-to-aws-eks-for-sso-users-via-aws-sso-to-view-and-manage-the-cluster-17e2acfd6a35 for screenshoots of AWS EKS console depending of different roles. | Review https://medium.com/codex/how-to-provide-access-to-aws-eks-for-sso-users-via-aws-sso-to-view-and-manage-the-cluster-17e2acfd6a35 for screenshoots of AWS EKS console depending of different roles. | ||
| − | Related: <code>[[groups:]]</code> | + | Related: <code>[[groups:]]</code>, <code>[[kubectl get clusterroles]]</code> |
== Related terms == | == Related terms == | ||
Revision as of 08:45, 27 September 2023
Kubernetes RBAC uses the rbac.authorization.k8s.io API Group, GA since Kubernetes 1.8 (Sep 2017)
https://kubernetes.io/docs/reference/access-authn-authz/rbac/
Commands
kubectl create rolekubectl create clusterrolekubectl create rolebindingkubectl create clusterrolebinding
K8s Cluster roles
https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
Review https://medium.com/codex/how-to-provide-access-to-aws-eks-for-sso-users-via-aws-sso-to-view-and-manage-the-cluster-17e2acfd6a35 for screenshoots of AWS EKS console depending of different roles.
Related: groups:, kubectl get clusterroles
Related terms
- Kubernetes tokens
- Attribute-based access control (ABAC)
- Kubernetes service account:
kubectl create serviceaccount - CKA 1.23: Manage role based access control (RBAC)
- AWS Controllers for Kubernetes (ACK)
- Amazon EKS authorization
Activities
- Learn the differences between
RoleandClusterRole: https://kubernetes.io/docs/reference/access-authn-authz/rbac/#role-and-clusterrole
News
- March 2017 Kubernetes 1.6 [1]
See also
- Kubernetes roles,
kubectl get [ roles | clusterroles | clusterrolebindings ], kubectl create rolebinding, K8s Cluster roles kubectl auth [ can-i | reconcile ]- Kubernetes RBAC
kubectl auth, kubectl auth can-i, kubectl auth reconcilekubectl create [ role | clusterrole | clusterrolebinding|rolebinding | serviceaccount ], groups:, Kubernetes RBAC good practices,kube2iam, K8s Cluster roles,rbac.authorization.k8s.io,system:
Advertising:
