Junior — Middle

What tool or service do you use to manage access rights and security policies in a cluster?

sobes.tech AI

Answer from AI

To manage access rights and security policies in a cluster, tools built into container orchestration systems, such as Kubernetes, are often used.

The main tool is Role-Based Access Control (RBAC). RBAC allows defining roles with specific permissions and assigning them to users or services.

Additionally, for more complex management, tools and services such as:

Open Policy Agent (OPA) — for writing and enforcing security policies.
Istio — a service mesh with access control and security features.
Vault by HashiCorp — for managing secrets and access.

Example in Kubernetes:

apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  namespace: default
  name: pod-reader
rules:
- apiGroups: [""]
  resources: ["pods"]
  verbs: ["get", "watch", "list"]

This Role can be assigned to a user or a service account to restrict access to read-only pods.

Previous Next