Forbid use of kubectl commands

Question

So, we need to meet PCI DSS requirements. Some of requirements force use of individual users for changing/modifying anything inside of the environment. Because i was not able to find possibility to do so for running kubectl commands, i want just to forbid any use of kubectl commands, how can i do this?

Thanks

Accepted Answer

To forbid use for certain commands / manage access for users, you should look into RBAC which includes role binding at diff levels ie cluster and namespace levels. Ref: https://kubernetes.io/docs/reference/access-authn-authz/rbac/

RBAC should help you with what you require but needs a careful reading :)

--Syd

RBAC should help you with what you require but needs a careful reading :)

--Syd

Forbid use of kubectl commands

Contenuto pertinente