RBAC
RBAC, (Role-Based, Access, Control) DECIDE, karta hai, ki, KAUN, (user, ya, service, account) KAUNSE, Kubernetes, resources, PAR, KYA, ACTIONS, (get, list, create, delete) PERFORM, kar, sakta hai.
"Role", EK, SPECIFIC, namespace, ke, ANDAR, PERMISSIONS, DEFINE, karta hai, "ClusterRole", POORE, cluster, ke, liye. "RoleBinding" EK, Role, ko, EK, user/service-account, se, ATTACH, karta hai — Role, akela, KUCH, NAHI, karta, jab, tak, USE, BIND, na, kiya, jaaye.
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
namespace: default
name: pod-reader
rules:
- apiGroups: [""]
resources: ["pods"]
verbs: ["get", "list"]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: read-pods
namespace: default
subjects:
- kind: User
name: jane
roleRef:
kind: Role
name: pod-reader- RBAC = kaun kaunse resources par kya actions kar sakta hai
- Role (namespace-scoped) vs ClusterRole (cluster-wide)
- RoleBinding Role ko user/service-account se attach karta hai
Service, Accounts, PODS/applications, ke, liye, IDENTITY, provide, karte, HAIN, (jaise, users, HUMANS, ke, liye, karte, HAIN) — HAR, pod, EK, service, account, ke, saath, RUN, hota hai (agar, SPECIFY, NAHI, kiya, TO, "default" service, account, use, hota hai).
kubectl create serviceaccount my-app-sa
kubectl get pod my-pod -o jsonpath='{.spec.serviceAccountName}'"ClusterRoleBinding" EK, ClusterRole, ko, EK, user/service-account, se, BIND, karta hai POORE, CLUSTER, mein, (na, ki, EK, SINGLE, namespace, mein) — EXTREME, CAUTION, ke, saath, use, karna, CHAHIYE, kyunki, YE, BAHUT, POWERFUL, ACCESS, deta hai.