KCNA · Question #206
Which of the following best describes the way K8S Role-based access control (RBAC) works?
The correct answer is C. States which users can perform which actions against the resources. Kubernetes RBAC (Role-Based Access Control) defines permissions by specifying which authenticated subjects are allowed to perform specific actions on certain resources within the cluster.
Question
Which of the following best describes the way K8S Role-based access control (RBAC) works?
Options
- AK8S does not do RBAC or Cluster role
- BRBAC lists which operations are denied to users
- CStates which users can perform which actions against the resources.
How the community answered
(67 responses)- A3% (2)
- B7% (5)
- C90% (60)
Why each option
Kubernetes RBAC (Role-Based Access Control) defines permissions by specifying which authenticated subjects are allowed to perform specific actions on certain resources within the cluster.
Kubernetes fundamentally implements RBAC and ClusterRoles for managing access permissions within the cluster.
Kubernetes RBAC is primarily additive; it specifies what operations are *allowed* for users, rather than explicitly listing what is denied.
Kubernetes RBAC is an authorization mechanism that precisely defines what authenticated users, groups, or service accounts are permitted to do (e.g., 'get', 'create', 'delete') on specific Kubernetes API resources (e.g., 'pods', 'deployments', 'secrets'). It allows for fine-grained control over cluster access.
Concept tested: Kubernetes RBAC authorization mechanism
Source: https://kubernetes.io/docs/reference/access-authn-authz/rbac/
Topics
Community Discussion
No community discussion yet for this question.