Kubernetes · hands-on lab
Kubernetes Lab 08: RBAC and Service Accounts
Give least-privilege access with Roles, RoleBindings, ClusterRoles and ServiceAccounts, and test it with auth can-i.
- 40 minutesTime in the lab
- AdvancedLevel
- 6 tasksChecked automatically
- CertificateVerifiable link when you finish
The situation
A CI pipeline needs to update deployments in one namespace only, and nothing else.
What you will do
- Explore: Role resourcesquestion
- Explore: Verbsquestion
- Guided exercise: ServiceAccount
- Guided exercise: Role and RoleBinding
- Lab: Read-only across the cluster
- Scopequestion
How it works
The lab opens in your browser: a real terminal or desktop, nothing to install. Work through the tasks, press Check after each one and the portal verifies your work. Stuck? Ask for a hint. Finish every task and you get a certificate page with its own verification link for LinkedIn or your CV.