Role Based Access Control

Role based access control is method of authorization in which access is provided to users based on their roles. There can be multiple users binded to a single role.

Unlike ABAC, permissions are independent of users. This makes the updation of permissions easy.

It has two types,

1. Namespaced roles and bindings
2. Cluster roles and bindings.

In namespaced, role and bindings happen in particular namespace only. It has Role and RoleBinding objects.

In cluster spaced, cluster role and binding happen in the whole cluster, across namespaces. It uses ClusterRole and ClusterRoleBinding.

References

1. https://kubernetes.io/docs/reference/access-authn-authz/rbac/