What you need to know about Kubernetes RBAC

This post details how to get started with Kubernetes Role-Based Access Control (RBAC), contrasting it with Attribute-Based Access Control (ABAC). It explains RBAC resources like Roles, ClusterRoles, RoleBindings, and ClusterRoleBindings, providing YAML examples for each. Best practices for least privilege are outlined, including being specific with resources and verbs, preferring Roles over ClusterRoles, and using dedicated service accounts. It also notes that GitLab currently does not support RBAC integration, requiring the use of ABAC.