Managing Kubernetes RBAC requires knowledge of a few elements. Specifically, we should learn about Rules, Roles, Subjects, and RoleBindings.
A Rule is a set of operations (verbs), resources, and API groups. Verbs describe activities that can be performed on resources which belong to different API Groups.
Permissions defined through Rules are additive. We cannot deny access to some resources.
Currently supported verbs are as follows:
| Verb | Description |
| get | Retrieves information about a specific object |
| list | Retrieves information about a collection of objects |
| create | Creates a specific object |
| update | Updates a specific object |
| patch | Patches a specific object |
| watch | Watches for changes to an object |
| proxy | Proxies requests |
| redirect | Redirects requests |
| delete | Deletes a specific object |
| deletecollection | Deletes a collection of objects |
If...