Kubernetes Security Operations: Difference between revisions

From NovaOrdis Knowledge Base
Jump to navigation Jump to search
(Created page with "=Internal= * Kubernetes Operations =Service Account Operations= {{Internal|Kubernetes Service Account Operations|Service Account Operations}} =RBAC Operations= {{Internal...")
 
Line 6: Line 6:
=RBAC Operations=
=RBAC Operations=
{{Internal|Kubernetes RBAC Operations|RBAC Operations}}
{{Internal|Kubernetes RBAC Operations|RBAC Operations}}
=Authorization Check=
<syntaxhighlight lang='bash'>
kubectl --as=system:serviceaccount:<namespace>:<serviceaccount-name> -n <namespace> auth can-i use <resource-name>
kubectl --as=system:serviceaccount:blue:blue-serviceaccount -n blue auth can-i use podsecuritypolicy/example
</syntaxhighlight>

Revision as of 06:04, 3 September 2020

Internal

Service Account Operations

Service Account Operations

RBAC Operations

RBAC Operations

Authorization Check

kubectl --as=system:serviceaccount:<namespace>:<serviceaccount-name> -n <namespace> auth can-i use <resource-name>
kubectl --as=system:serviceaccount:blue:blue-serviceaccount -n blue auth can-i use podsecuritypolicy/example