Role Based Access Control (RBAC) in Kubernetes | Kubernetes Authorisation explained through demo

[@shamstabrez2986]

kya video tha yr hr ek mint information se bhara hua very nyc video brother keep going n uploading sch kind of videos

[@viveksinghggits]

Thank you Shams.

[@soumilkhandelwal4388]

This is pure GOLD !!! Thank you very much for your efforts in explaining and hands-on with the K8s RBAC. Learned a lot, and now feel confident with this topic now.

[@viveksinghggits]

Hi, Thank you Soumil. I appreciate it.

[@nitaprasad3855]

I like the way you were making sure that you are sharing whatever possible thing you are aware of RBAC.

[@viveksinghggits]

Thank you Nita. I am glad it was helpful.

[@darahaskopparapu]

This helped me a lot! Could you please make a video on authentication mechanisms

[@nitaprasad3855]

Your way of making understand is so good..... Keep it up the good work... Thank you

[@viveksinghggits]

Thank you.

[@dhrub6]

Amazing explanation. Thank you so much.

[@viveksinghggits]

Thank you for watching.

[@kanagalakshmimurugesan289]

Hi Vivek...Thanks for sharing your knowledge on K8S. I have started following you just two days back and now I am able to understand all K8S concepts clearly. Thank you so much for taking time to make these videos and share it with us. I have learnt lot of new stuff from all your videos. Keep up the good work and content. God bless you dear!😊

[@viveksinghggits]

Thank you Kanagalakshmi. I am glad the videos were helpful.

[@bichitrasahoo4943]

Im learing kubernetes from youtube from last couple of month. there are tutorials are good but the way you have deep dive into the courses have helped me a lot. my kind request is to get the history of the command and attach here..:)

[@viveksinghggits]

Do you want the entire history or commands in this video? Unfortunately I can't do any of those because I can't just dump history and paste the output, security reasons. And I don't have handle to the commands that were used in the video. Do you have problem with any specific command that I can help you with?

[@dasilavanya7429]

Wow ,it’s really awesome and worth full explanation.I have never seen such kind of content in KZbin.keep continue bro.stay blessed.Thank you very much.I got cleared all the doubts regarding RBAC.

[@viveksinghggits]

Hey 👋, Thank you for the kind words 🙏. I really appreciate it.

[@mohitsejwal6099]

very well explained.thanks a lot

[@viveksinghggits]

Thank you Mohit.

[@jayslog]

I enjoyed watching it.~!

[@viveksinghggits]

Thank you.

[@matinpathan5186]

Very good video Vivek but does this last video of your video have you go on creating video on K8s for the real time scenarios

[@viveksinghggits]

Thank you Matin.

[@devathanagapuneeth7269]

When I try to run any kubectl command I will get this error "the connection to the server localhost 8080 was refused - did you specify the right host or port " and when I switch to super user I am able to run those commands. What is the reason for this behaviour ?

[@viveksinghggits]

I think kubectl is not able to read the kubeconfig file.

[@devathanagapuneeth7269]

@@viveksinghggits Is there any slack or discord channel of yours ?

[@phaneerameswarareddychilum7189]

Your videos are very good and having good technical stuff. If possible Please provide the notes for quick reference

[@viveksinghggits]

Hey 👋, Thank you so much for the kind words. By notes, do you mean the commands that I run? Do you want me to get them documented somewhere?

[@phaneerameswarareddychilum7189]

@@viveksinghggits Yes Please share the commands if you have documented

[@viveksinghggits]

Ok let me figure a way to do that.

[@krishnareddy8353]

Great Vivek, it helps me to review my CKA content, by the way, what is the advantage of aggregated cluster roles, is it sum up all the roles and actions details to have in one place?

[@viveksinghggits]

That's right. And I think if you have an use associated with an aggregated cluster role, to give him more access you can just create another cluster role, let's say cr-b, with the label that you have specified in agg cluster role. The important thing here is we can use newly created cluster role (cr-b) separately as well.

[@srikanthp1308]

Thank you vivek,

[@viveksinghggits]

😊

[@farukabdullah2607]

I find very helpful ... Awesome explanation ... Very easy way ... please make one video about rbac authenticate for normal user using tls and using token ....

[@viveksinghggits]

Sure I will make that video as well.

[@farukabdullah2607]

Hello Vivek Sir, video is very helpful ... But i don't understand system: service account: default: default ...... For this , may i need to know service account

[@viveksinghggits]

Hey Faruk, I made another video about service accounts, I think you should check that out. Very briefly we can say that service accounts are also eventually treated as users and the format to write a service account is system:serviceaccount:namespace_of_serviceaccount:name_of_serviceaccount Let me post the video link as well kzbin.info/www/bejne/sJfMq2ClhMqsg8k

[@farukabdullah2607]

I have already watched .... very nice explanation .... I have some confusion on system:serviceaccount: default:default

[@viveksinghggits]

What is the confusion Faruk?

[@kksaxena1550]

Bro how we can use Amazon ECR in kuberneters

[@viveksinghggits]

Hey KK, If you have container image pushed in ECR, you should be able to use that pretty easily in manifests, can you please explain if there is something specific that you want me to discuss.

[@Rosepoision]

Whenever you type on cmd increase the font size and type slow please

[@viveksinghggits]

Sure SMBK, I will keep these things in mind in coming videos. Thanks for the feedback.

[@javawithneerajgahlawat5361]

Hi Vivek, You are doing a great job. Looking for some help i want to check weather i will be able to perform action (verbs) from my app (nginx) running in pod (nginx-8d559555-kv5pt) . I tried with below cmd. i was able to check with --as system:serviceaccount:test-ns1:test-sa . now i want to be sure with pod or app as well .Thanks kubectl auth can-i get secret -n test-ns3 --as system:pod:test-ns1:nginx-8d559555-kv5pt;

[@viveksinghggits]

Hi Neeraj, When you say you want to run a command from inside a pod, I am assuming you have written an application that wants to, lets say, get secret. In that case the pod is not an entity that gets authorized to do the operation. Instead the service account that gets mounted in the pod is the entity that is responsible for that authz. I have a video about service account as well, that explains these things in detail. I recommend you watching that video.