From the course: Certified Kubernetes Application Developer (CKAD) Cert Prep

Unlock this course with a free trial

Join today to access over 24,700 courses taught by industry experts.

Authentication and authorization

Authentication and authorization - Kubernetes Tutorial

From the course: Certified Kubernetes Application Developer (CKAD) Cert Prep

Start my 1-month free trial Buy for my team

Authentication and authorization

“

- So, let's talk about authentication and authorization. Authentication is about where Kubernetes users are coming from. In vanilla Kubernetes and also in Minikube, a local Kubernetes admin account is used for authentication. In more advanced setups, you can create your own user accounts. That's something that is covered in the CKA Class. The kubectl config specifies to which cluster uses authenticate. You can view that information using kubectl config view, or by checking the contents of the .kube/config file. Authorization is about what these users can do, and behind authorization, there is Role Based Access Control or RBAC to take care of the different options. And if you want to find out what you can do, you can use commands like kubectl auth can-I, like kubectl auth can-i get pods to find out if you can get pods. For example, kubectl auth can-i get pods--as =system:serviceaccount :bellevue:viewer -n bellevue, which is specifying if you can get pods as the service account viewer…

Contents