RBAC
RBAC controls access to K8s resources by role: roles define operation permissions, bound to users/groups/ServiceAccounts.
Purpose
Enforce least privilege on K8s API access, preventing unauthorized operations.
Mechanism
Role (Namespace-scoped)/ClusterRole (cluster-wide). RoleBinding/ClusterRoleBinding binds them to subjects. verbs: get/list/create/update/delete. ServiceAccount + RBAC control application permissions.
Use cases
- Access control
- K8s security
- Least privilege