K8s Access Control

Overview

You can easily and conveniently grant or revoke access permissions to Kubernetes APIs for users or groups based on roles. It facilitates the creation of detailed policies that specify which users can access specific resources through designated API calls, under defined conditions. Users or groups can be granted roles customized to their operational needs, ensuring they have only the essential permissions necessary for accessing Kubernetes resources. When users belong to multiple user groups or policies, permissions are applied in a nested manner, enforcing policy overlap. If permissions are not explicitly granted, users are denied access to those resources by default, as the system operates on an "All Deny" basis.

Access to the K8s Access Control Guide