Kubernetes RBAC

Before we dive into RBAC, recall from Chapter 4, How to Communicate with Kubernetes (API Server), how Kubernetes authorizes requests to the API. We learned that there are three stages – Authentication, Authorization, and AdmissionControl. We will learn more about Admission Controllers in Chapter 16, Kubernetes Admission Controllers.

Kubernetes supports multiple different methods of authenticating with the cluster, and you'll want to reference your cloud provider's documentation to get more details on their specific implementation.

Authorization logic is handled through something called RBAC. It stands for role-based access control and it's the foundation of how we constrain certain users and groups to the minimum necessary permissions to perform their job. This is based on a concept in software security called "the principle of least privilege." For example, if you are a software engineer for a credit card processing company, Payment...