Marcus Noble • 1/20/2022

Restricting cluster-admin Permissions

Read Original

This technical article discusses a limitation of Kubernetes RBAC, which only allows adding permissions. It details a real-world problem where a buggy CLI tool used by cluster-admins was causing issues, and explains how the team at Giant Swarm used the Kyverno admission controller to create a ClusterPolicy that blocks specific delete actions, effectively restricting permissions even for users with the cluster-admin role.

0 comments
#Kubernetes #Rbac #Cluster Admin
Restricting cluster-admin Permissions

Comments

No comments yet

Be the first to share your thoughts!

Browser Extension

Get instant access to AllDevBlogs from your browser

Top of the Week

1
React, useEffect, and Stale Closures: How to Avoid Them with Dependencies and useRef
Jivbcoop • 4 votes
2
Better react-hook-form Smart Form Components
Maarten Hus • 2 votes
3
AGI, ASI, A*I – Do we have all we need to get there?
John D. Cook • 1 votes
4
Quoting Thariq Shihipar
Simon Willison • 1 votes
5
Dew Drop – January 15, 2026 (#4583)
Alvin Ashcraft • 1 votes
6
Using Browser Apis In React Practical Guide
Jivbcoop • 1 votes