Just like almost everything else in Kubernetes, authorization is modular. We can choose to use Node, ABAC, Webhook, or RBAC authorization. Node authorization is used for particular purposes. It grants permissions to kubelets based on the Pods they are scheduled to run. Attribute-based access control (ABAC) is based on attributes combined with policies and is considered deprecated in favor of RBAC. Webhooks are used for event notifications through HTTP POST requests. Finally, Role-based access control (RBAC) grants (or denies) access to resources based on roles of individual users or groups.
Among the four authorization methods, RBAC is the right choice for user-based authorization. Since we'll focus this chapter on the exploration of the means to authorize humans, RBAC will be our primary focus.
What can we do with RBAC? To begin with, we can use it to...
