UPDF AI

Role-based Access Control (RBAC) Authorization in Kubernetes

Garsha Rostami

2023 · DOI: 10.13052/jicts2245-800x.1132
Journal of ICT Standardization · 15 Citations

TLDR

This paper will describe how the Kubernetes RBAC authorization sub-system works, how to leverage it to secure access to resources in the cluster, and how to validate the set policies through impersonation to ensure users and service accounts are granted the intended rights.

Abstract

In computer systems security, role-based access control (RBAC) or role-based security is an approach to restricting system access to authorized users [1]. This paper will describe how the Kubernetes RBAC authorization sub-system works, how to leverage it to secure access to resources in the cluster, and how to validate the set policies through impersonation to ensure users and service accounts are granted the intended rights.