How do I set up RBAC in Kubernetes?

How do I set up RBAC in Kubernetes?

To set up RBAC in Kubernetes, you need to create Roles or ClusterRoles and then bind them to users or service accounts using RoleBindings or ClusterRoleBindings.

What are the differences between Role and ClusterRole?

A Role is namespace-specific, while a ClusterRole can be used across all namespaces. Use ClusterRole for cluster-wide permissions.

Can you give me an example of a Role definition?

Sure! Here's a simple Role definition:

apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  namespace: my-namespace
  name: my-role
rules:
- apiGroups: [""]
  resources: ["pods"]
  verbs: ["get", "list", "watch"]

How do I bind this Role to a user?

You can bind the Role using a RoleBinding. Here's an example:

apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  name: my-role-binding
  namespace: my-namespace
subjects:
- kind: User
  name: my-user
  apiGroup: rbac.authorization.k8s.io
roleRef:
  kind: Role
  name: my-role
  apiGroup: rbac.authorization.k8s.io