October 2019
Intermediate to advanced
520 pages
13h 5m
English
Native Kubernetes role-based access control (RBAC) can be used in combination with Cloud IAM. While Cloud IAM works on a project level. RBAC grants permissions to Kubernetes resources. Privileges are granted at the cluster or namespace level. The following is an example of a Role object that grants read access to all the Pods in a mynamespace namespace:
kind: RoleapiVersion: rbac.authorization.k8s.io/v1metadata: namespace: mynamespace name: pod-readerrules:- apiGroups: [""] # "" indicates the core API group resources: ["pods"] verbs: ["get", "watch", "list"]
Read now
Unlock full access