Difference between revisions of "Kubernetes RBAC"
Jump to navigation
Jump to search
↑ https://www.mirantis.com/blog/whats-new-kubernetes-1-6-focus-stability/
(→Roles) |
(→Roles) |
||
| Line 15: | Line 15: | ||
== Roles == | == Roles == | ||
https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles | https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles | ||
| − | + | {{K8s roles TOC}} | |
| − | |||
| − | |||
| − | |||
Review https://medium.com/codex/how-to-provide-access-to-aws-eks-for-sso-users-via-aws-sso-to-view-and-manage-the-cluster-17e2acfd6a35 for screenshoots of AWS EKS console depending of different roles. | Review https://medium.com/codex/how-to-provide-access-to-aws-eks-for-sso-users-via-aws-sso-to-view-and-manage-the-cluster-17e2acfd6a35 for screenshoots of AWS EKS console depending of different roles. | ||
Revision as of 17:08, 12 September 2023
Kubernetes RBAC uses the rbac.authorization.k8s.io API Group, GA since Kubernetes 1.8 (Sep 2017)
https://kubernetes.io/docs/reference/access-authn-authz/rbac/
Commands
kubectl create rolekubectl create clusterrolekubectl create rolebindingkubectl create clusterrolebinding
Roles
https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
Review https://medium.com/codex/how-to-provide-access-to-aws-eks-for-sso-users-via-aws-sso-to-view-and-manage-the-cluster-17e2acfd6a35 for screenshoots of AWS EKS console depending of different roles.
Related: groups:
Related terms
- Kubernetes tokens
- Attribute-based access control (ABAC)
- Kubernetes service account:
kubectl create serviceaccount - CKA 1.23: Manage role based access control (RBAC)
- AWS Controllers for Kubernetes (ACK)
- Amazon EKS authorization
Activities
- Learn the differences between
RoleandClusterRole: https://kubernetes.io/docs/reference/access-authn-authz/rbac/#role-and-clusterrole
News
- March 2017 Kubernetes 1.6 [1]
See also
- Kubernetes roles,
kubectl get [ roles | clusterroles | clusterrolebindings ], kubectl create rolebinding, K8s Cluster roles kubectl auth [ can-i | reconcile ]- Kubernetes RBAC
kubectl auth, kubectl auth can-i, kubectl auth reconcilekubectl create [ role | clusterrole | clusterrolebinding|rolebinding | serviceaccount ], groups:, Kubernetes RBAC good practices,kube2iam, K8s Cluster roles,rbac.authorization.k8s.io,system:
Advertising:
