day2_challenge.md

Warmup with RBAC- Add a User!

Objective

Create a new user for your cluster and endow them with the permissions they need! Use the following labs to help you:

• 45. 💻1️⃣ Role Based Access Control
• 46. 💻2️⃣ RBAC Distributing Access

Procedure

1. Create a new namespace named challenge.

   kubectl create ns challenge

2. Create a UserAccount with your name! For now, let's call him tony.

3. Give tony the following permissions:

   In the namespace "challenge", tony can:

   • [pods] - get, list, watch, create, update, delete
   • [deployments] - get, list, watch, create, update, delete

   In all namespaces, tony can:

   • [pods] - get, list, watch

4. Add your new user to your kubeconfig. Test that your permissions are correct with kubectl auth!