Role-Based Access Control

Introduction

This lesson belongs to the Cluster Architecture, Installation & Configuration domain (25% of the CKA, Kubernetes v1.35). The official curriculum asks you to manage role-based access control (RBAC). In the performance-based exam this almost always becomes a short, precise task: "create a Role that lets a ServiceAccount list Pods in namespace dev, bind it, and verify it", or "a Pod gets 403 Forbidden when it calls the API; fix the permissions". RBAC tasks are fast to solve if you know the four objects and three imperative commands by heart, and easy to lose points on if you confuse a namespaced Role with a cluster-wide ClusterRole.