DEV Community

Cheedge Lee
Cheedge Lee

Posted on • Originally published at notes-renovation.hashnode.dev

CKA Quick Check Points -- RBAC

This is a quick recap for RBAC, more details can check the official doc or click the tiltle links.

ServiceAccount (sa)

1. Yaml File

2. CMD

kubectl create serviceaccount NAME -n NAMESPACE
Enter fullscreen mode Exit fullscreen mode

Role/Clusterrole

1. Yaml File

2. CMD

kubectl create [role|clusterrole] NAME --verb=verb --resource=resource.group/subresource [--resource-name=resourcename]
Enter fullscreen mode Exit fullscreen mode

Rolebinding/Clusterrolebinding

1. Yaml File

2. CMD

kubectl create rolebinding NAME --clusterrole=NAME|--role=NAME [--user=username] [--group=groupname]
[--serviceaccount=namespace:serviceaccountname]
kubectl create clusterrolebinding NAME --clusterrole=NAME [--user=username] [--group=groupname]
[--serviceaccount=namespace:serviceaccountname]
Enter fullscreen mode Exit fullscreen mode

Usage & Quick Verify

1. Usage

Pod yaml file add spec.serviceAccountName

2. Quick Verify

kubectl auth can-i VERB RESOURCE --as=[USER|SA] -n NAMESPACE
Enter fullscreen mode Exit fullscreen mode

more verifications can check details.

Image of Timescale

🚀 pgai Vectorizer: SQLAlchemy and LiteLLM Make Vector Search Simple

We built pgai Vectorizer to simplify embedding management for AI applications—without needing a separate database or complex infrastructure. Since launch, developers have created over 3,000 vectorizers on Timescale Cloud, with many more self-hosted.

Read full post →

Top comments (0)

Postmark Image

Speedy emails, satisfied customers

Are delayed transactional emails costing you user satisfaction? Postmark delivers your emails almost instantly, keeping your customers happy and connected.

Sign up