Beyond cluster-admin: Getting Started with Kubernetes Users and Permissions
summary
Shows how to provision Kubernetes users with TLS certs, OIDC, or service accounts and automates the YAML and CLI steps; demos use Docker Desktop and kubeadm-style CA files, run kubectl certificate approve to produce a user.crt, and inspect JWT payloads for namespace and pod. Demonstrates bound service account tokens that die when the source pod is deleted, creates a namespaced get-pods role and a rolebinding to devox:default, and builds a minimal role that can only patch the deployment/scale nginx resource and successfully scale it.
AI-written summary · about
chapters (7)
- 0:00Introduction
- 1:21Authn and Authz concepts
- 2:16Authentication methods
- 8:12Service accounts and tokens
- 12:51RBAC overview
- 17:41Practical demonstration
- 43:23Wrap up
related talks
33mBeyond Cluster-Admin: Getting Started with Kubernetes Users and Permissions
32mStop giving root access and start securing your Kubernetes clusters instead
33mHow the Basics Of Kubernetes Auth Scale For Organizations
41mKubernetes Auth and Access Control
01h 59mBuilding Secure Kubernetes Clusters with Identity Management
25mMastering K8s Security
33mSecuring Kubernetes in the Cloud
01h 31mInside the Kube: A Guided Tour of Kubernetes Cluster Setup