From the course: Certified Kubernetes Security Specialist (CKS) Cert Prep
Unlock this course with a free trial
Join today to access over 24,700 courses taught by industry experts.
Role-based access control (RBAC) - Kubernetes Tutorial
From the course: Certified Kubernetes Security Specialist (CKS) Cert Prep
Role-based access control (RBAC)
- So now that we have the dashboard loaded, let's go ahead and add a user so that we can get access to it. So the first thing we'll do is we're going to create a service account. Now this is just going to be an example. Now it's not going to be the most secure example, but it's going to show us how we can get in there fairly quickly. Then we'll start to lock it down with other parameters. But the first thing we want to do is we want to go ahead and apply a service account. So all we're going to do is we're going to go ahead and apply this little bit of YAML here. So it's a service account. We're going to give it a name of admin user and set it up in the namespace of Kubernetes dashboard. So at this point, we'd hit enter and that has created this service account. Now the next thing we need to do is we need to do a role binding. So a role binding is just going to take that username and apply it to permissions within the cluster. So once we go through and apply this one, so we're going…
Download courses and learn on the go
Watch courses on your mobile device without an internet connection. Download courses using your iOS or Android LinkedIn Learning app.
Contents
-
-
(Locked)
Module 3: Cluster hardening introduction37s
-
(Locked)
Learning objectives33s
-
(Locked)
Kubernetes API fundamentals6m 31s
-
(Locked)
Kubernetes access control10m 44s
-
(Locked)
API server configuration11m 38s
-
(Locked)
API server hardening13m 6s
-
(Locked)
Verify access control policies13m 37s
-
(Locked)
-
-
(Locked)
Module 6: Software supply chain security introduction40s
-
(Locked)
Learning objectives35s
-
(Locked)
Software supply chain risks9m 25s
-
(Locked)
Protect image registry access5m 36s
-
(Locked)
Require signed images14m 22s
-
(Locked)
Policy enforcement: Image policy webhook21m 28s
-
(Locked)
Policy enforcement: Validating admission policy8m 55s
-
(Locked)
-
-
(Locked)
Learning objectives47s
-
(Locked)
Understanding syscall behavioral analysis12m 28s
-
(Locked)
Using Falco for threat detection7m 14s
-
(Locked)
Falco host installation14m
-
(Locked)
Falco Kubernetes installation13m 51s
-
(Locked)
Falco configuration and rules7m 42s
-
(Locked)
Falco custom rules in action19m 17s
-
(Locked)
-
-
(Locked)
Module 8: Exam practice scenarios introduction42s
-
(Locked)
Learning objectives52s
-
(Locked)
Securing Kubernetes API access12m 37s
-
(Locked)
Implementing pod security standards (PSS)11m 43s
-
(Locked)
Enforcing network policies for pod communication12m 27s
-
(Locked)
Restricting image registries11m 7s
-
(Locked)
Configuring secret encryption12m 32s
-
(Locked)