I want a deployment in kubernetes to have the permission to restart itself, from within the cluster. I know I can create a serviceaccount and bind it to the pod, but I'm missing the name of the mos...

I'm trying to install a helm package on a kubernetes cluster which allegedly has RBAC disabled. I'm getting a permission error mentioning clusterroles.rbac.authorization.k8s.io, which is what I'd e...

I´ve implemented JWT RBAC in my Quarkus application, but I don´t want to provide tokens whenever I´m testing my application locally. EDIT: What I´ve tried so far are setting these properties to "...

I have an Azure environment with multiple subscriptions and resources. My requirement is to have a functionality where if I pass a user name or SPN name, it gives me all azure resources (from manag...

I am using kubernetes dasboard in version: v1.10.1 When I go to "Roles" tab I can see a list of ClusterRoles and Roles. I would like to see more details about a particular role from the list, b...

Our system is moving from a monolithic to a microservice architecture. The microservice architecture comes with technical challenges that we need to address and one of them is AuthN/AuthZ. Our app...

How can I, using the Azure Python API, create a full set of credentials that can later be used to start and deallocate all VMs in a named resource group, without any other permissions? I have thoro...

I want to give my application limited access to get the replicas of different statefulsets (and maybe deployment) and if necessary scale them up or down. I have created ServiceAccount, Rolebinding...

There is a default ClusterRoleBinding named cluster-admin. When I run kubectl get clusterrolebindings cluster-admin -o yaml I get: apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBindin...

apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: namespace: xi-{{instanceId}} name: deployment-creation rules: - apiGroups: [""] resources: ["pods"] verbs: ["get", "list", "watch"]...

We have a nest application that should implement rbac. I added a basic guard and decorator for it based on the guard docs: https://docs.nestjs.com/guards. The problem: This only allows static roles...

I tried with the kubectl get sa default command, but only see some very basic values. What's the command to view the permissions/roles associated with a specific service account in k8s?

One can create Role or ClusterRole and assign it to user via RoleBinding or ClusterRoleBinding. from user view that have a token, how to get all granted permissions or roles\rolebindings applied t...

I checked the kubernetes docs, find that pods/exec resources has no verb, and do not know how to only control access for it? Since I create a pod, someone else need to access it use 'exec' but cann...

We are building a cloud based application, using C# as our main language and running on Microsoft Azure. One of the key pieces of the architecture is to have fine grained authorization rights imple...

I'm deploying an AKS k8s cluster with terraform. The cluster has rbac enabled with azure active directory. The cluster creation goes fine and after that terraform tries to perfom some taks on the c...

If not specified, pods are run under a default service account. How can I check what the default service account is authorized to do? Do we need it to be mounted there with every pod? If not, how ...

I followed this article on how to setup RBAC for users in Kubernetes cluster: https://medium.com/better-programming/k8s-tips-give-access-to-your-clusterwith-a-client-certificate-dfb3b71a76fe. This ...

I'm really new to Azure but trying to learn - so apologies if this is a daft question. I've started the free trial (which gives me some credit to start with), and I'm trying to create a key vault. ...

I'm trying to create a cluster role with permissions to watch events, but it seems that I'm missing something. I'm using the following: apiVersion: v1 kind: ServiceAccount metadata: name: watch-...

I need to create users to assign them permissions with RBAC, I create them as follows: echo -n "lucia" | base64 bHVjaWE= echo -n "pass" | base64 cGFzcw== apiVersion: v1 kind: Secret metadata: na...

I have some average yaml file defining some average role resource, all yaml should reflect my resource's desired state. To get new average role into cluster I usually run kubectl apply -f my-new-ro...

I am currently building a data lake (Gen2) in Azure. I use Terraform to provision all the resources. However, I ran into some permission inconsistencies. According to the documentation, one can set...

I am trying to enable Airflow LDAP authentication with RBAC features and did the following changes: Removed LDAP section from airflow.cfg Modified airflow.cfg: added rbac = true and removed auth...

Is there a way to apply RBAC rules at the resource level via ARM? I was able to follow this Microsoft guide to add a user/role at the resource group level, but not at the resource. In particular, I...