What is Kubernetes RBAC?
⚡
Quick Answer
Role-Based Access Control governs who can do what in a cluster. Roles/ClusterRoles define permissions on resources, and RoleBindings/ClusterRoleBindings grant them to users, groups, or service accounts.
Detailed Answer
RBAC is namespace-scoped (Role) or cluster-scoped (ClusterRole) and additive (no deny rules). Best practice is least privilege: give workloads dedicated service accounts with only the permissions they need, avoid cluster-admin, and audit bindings. It is a primary control for limiting blast radius if a credential or pod is compromised.
💡
Interview Tip
Emphasize least privilege and per-workload service accounts, and that RBAC is additive with no deny rules.
kubernetesrbacsecurity