RoleBindings and ClusterRoleBindings in Kubernetes - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is a RoleBinding in Kubernetes?

A RoleBinding grants permissions defined in a Role to a user or set of users within a specific namespace.

beginner

How does a ClusterRoleBinding differ from a RoleBinding?

A ClusterRoleBinding grants permissions defined in a ClusterRole to users across the entire cluster, not limited to a namespace.

intermediate

Can a RoleBinding reference a ClusterRole?

Yes, a RoleBinding can reference either a Role or a ClusterRole, but its permissions apply only within the RoleBinding's namespace.

beginner

What is the purpose of RBAC in Kubernetes?

RBAC (Role-Based Access Control) manages who can do what actions on which resources in a Kubernetes cluster.

beginner

What subjects can be bound in RoleBindings and ClusterRoleBindings?

Subjects can be users, groups, or service accounts that receive the permissions defined in the Role or ClusterRole.

What scope does a RoleBinding apply to?

A A single namespace

B The entire cluster

C Only system components

D Only nodes

RoleBindings apply permissions only within the namespace they are created in.

Which binding grants cluster-wide permissions?

A ClusterRoleBinding

B RoleBinding

C ServiceAccountBinding

D NamespaceBinding

ClusterRoleBindings grant permissions across the entire Kubernetes cluster.

Can a ClusterRoleBinding bind to a Role?

A Only for system users

B Yes, always

C Only if in the default namespace

D No, ClusterRoleBindings bind only to ClusterRoles

ClusterRoleBindings only bind to ClusterRoles, not Roles.

Which of these is NOT a valid subject in RoleBindings?

A User

B Pod

C ServiceAccount

D Group

Pods cannot be subjects in RoleBindings; only users, groups, or service accounts can.

What does RBAC stand for?

A Role-Bound Access Control

B Resource-Based Access Control

C Role-Based Access Control

D Resource-Bound Access Control

RBAC stands for Role-Based Access Control.

Explain the difference between RoleBinding and ClusterRoleBinding in Kubernetes.

Think about the scope of permissions and what roles they connect to.

Describe what subjects are in the context of RoleBindings and ClusterRoleBindings and give examples.

Subjects are who gets the permissions.