Manage Permissions

When multiple users access a Kubernetes cluster, you can assign permissions for specific APIs or namespaces to define access scopes. You can apply Kubernetes’ role-based access control (RBAC, Role-based access control) feature to set permissions for each cluster or namespace. You can create and manage ClusterRoles, ClusterRoleBindings, Roles, and RoleBindings.

Managing Cluster Roles

You can set and manage access permissions on a per-cluster basis. You can also set permissions for APIs or resources that are not limited to a namespace.

Create ClusterRole

To create a cluster role, follow these steps.

1. Click the All Services > Container > Kubernetes Engine menu. 1. Navigate to the Service Home page of Kubernetes Engine.
2. On the Service Home page, click Cluster Role under the Permissions menu. 2. Go to the Cluster role list page.
3. Cluster Role List page, after selecting the cluster and namespace from the list at the top left, click Create Object.
4. Enter the object information in the Object Creation Popup and click the Create button.

Check detailed information of the cluster role

To view detailed information about the cluster role, follow these steps.

1. All Services > Container > Kubernetes Engine menu, click it. 1. Go to the Service Home page of Kubernetes Engine.
2. On the Service Home page, click Cluster Role under the Permissions menu. 2. Go to the Cluster role list page.
3. Cluster Role List page, select the cluster and namespace from the list at the top left, then click Search.
4. Select the item you want to view detailed information for on the Cluster Role List page. 4. Navigate to the Cluster role details page.
   • If you select System Object Display at the top of the list, all items except the Kubernetes object entries will be shown.
5. Click each tab to view the service information.

   Category	Detailed description
   Delete ClusterRole	Delete the cluster role
   Detailed Information	Detailed information of the cluster role can be viewed
   YAML	The resource file of the ClusterRole can be edited in the YAML editor Edit button, modify the resource, then click the Done button to apply the changes When editing content, click the Diff button to view the changed content
   event	Check events that occurred within the cluster role
   Account information	Check basic information about the Account, such as name, location, and creation timestamp.
   Metadata Information	Check the metadata information of the ClusterRole
   Policy Rule Information	View the policy rule information of a ClusterRole Resources: List of resources to which the rule applies Non-Resource URLs: Non-Resource URLs are the set of partial URLs that a user needs to access * is allowed but only as the final segment of the path Since non-resource URLs are not namespaced, this field can only be applied to a ClusterRole referenced by a ClusterRoleBinding A rule can apply to an API resource (e.g., “pods” or “secrets”) or a non-resource URL path (e.g., “/api”), but not to both Resource Names: Resource names are an optional whitelist of names to which the rule applies. An empty set means everything is allowed Verbs: Verbs refer to the API verbs used in resource requests such as get, list, create, update, patch, watch, delete, deletecollection For more details, refer to the 쿠버네티스 공식 문서 > API Verbs

   Table. Cluster role detailed information items

Delete cluster role

To delete the cluster role, follow these steps.

1. Click the All Services > Container > Kubernetes Engine menu. 1. Go to the Service Home page of Kubernetes Engine.
2. On the Service Home page, click Cluster Role under the Permissions menu. 2. Go to the Cluster role list page.
3. Cluster Role List page, after selecting the cluster and namespace from the list at the top left, click Search.
4. On the Cluster role list page, select the items you want to delete. 4. Navigate to the Cluster role details page.
5. On the Cluster Role Details page, click Delete Cluster Role.
6. Notification dialog appears, click the Confirm button.

Managing ClusterRoleBinding

You can create and manage a cluster role binding by linking a cluster role with a specific target.

Create ClusterRoleBinding

To create a ClusterRoleBinding, follow these steps.

1. Click the All Services > Container > Kubernetes Engine menu. 1. Go to the Service Home page of Kubernetes Engine.
2. On the Service Home page, click ClusterRoleBinding under the Permissions menu. 2. Go to the Cluster Role Binding List page.
3. Cluster Role Binding List On the page, after selecting the cluster and namespace from the list at the top left, click Create Object.
4. Enter the object information in the Object Creation Popup and click the Create button.

View detailed information of ClusterRoleBinding

To view detailed information about the ClusterRoleBinding, follow these steps.

1. Click the All Services > Container > Kubernetes Engine menu. 1. Go to the Service Home page of Kubernetes Engine.
2. On the Service Home page, click ClusterRoleBinding under the Permissions menu. 2. Navigate to the Cluster Role Binding List page.
3. On the Cluster Role Binding List page, select the cluster and namespace from the list at the top left, then click Search.
4. Cluster Role Binding List page, select the item for which you want to view detailed information. 4. Navigate to the Cluster Role Binding Details page.
   • If you select System Object Display at the top of the list, all items except the Kubernetes object entries will be shown.
5. Click each tab to view the service information.

   Category	Detailed description
   Delete ClusterRoleBinding	Delete the cluster role binding
   Detailed Information	View detailed information of the ClusterRoleBinding
   YAML	The resource file of the cluster role binding can be edited in the YAML editor Edit button, modify the resource, and then click the Done button to apply the changes When editing content, click the Diff button to view the changes
   event	Check the events that occurred within the ClusterRoleBinding
   Account information	Check basic information about the Account, such as name, location, and creation timestamp.
   Metadata Information	Check the metadata information of the ClusterRoleBinding
   Role/Target Information	Check the role and target information of the ClusterRole

   Table. ClusterRoleBinding detailed information items

Delete ClusterRoleBinding

To delete a ClusterRoleBinding, follow these steps.

1. Click the All Services > Container > Kubernetes Engine menu. 1. Go to the Service Home page of Kubernetes Engine.
2. On the Service Home page, click ClusterRoleBinding under the Permissions menu. 2. Navigate to the Cluster Role Binding List page.
3. Cluster Role Binding List page, select the cluster and namespace from the list at the top left, then click View.
4. Select the item you want to delete on the Cluster Role Binding List page. 4. Go to the Cluster Role Binding Details page.
5. On the Cluster Role Binding Details page, click Delete Cluster Role Binding.
6. Notification dialog appears, click the Confirm button.

Manage roles

A role refers to a rule that specifies permissions for a particular API or resource. You can create and manage permissions that allow access only to the namespace to which the role belongs.

Create role

To create a role, follow the steps below.

1. All Services > Container > Kubernetes Engine menu, click it. 1. Go to the Service Home page of Kubernetes Engine.
2. On the Service Home page, click Role under the Permission menu. 2. Go to the Roll List page.
3. On the Role List page, after selecting the cluster and namespace from the list in the upper left, click Create Object.
4. Enter the object information in the Object Creation Popup and click the Create button.

Check detailed roll information

To view detailed roll information, follow the steps below.

1. Click the All Services > Container > Kubernetes Engine menu. 1. Navigate to the Service Home page of Kubernetes Engine.
2. On the Service Home page, click Role under the Permission menu. 2. Go to the Role List page.
3. Roll List page, after selecting the cluster and namespace from the list at the top left, click View.
4. Roll List page, select the item you want to view detailed information for. 4. Roll Details page is accessed.
   • Selecting Show system objects at the top of the list displays all items except the Kubernetes object entries.
5. Click each tab to view the service information.

   Category	Detailed description
   Delete role	Delete the role
   Detailed Information	View detailed information of the roll
   YAML	Roll’s resource file can be edited in the YAML editor Click the Edit button, modify the resource, then click the Done button to apply the changes When editing content, click the Diff button to view the changed content
   event	Check events that occurred within LoL
   Account information	Check basic information about the Account, such as name, location, creation date and time, etc.
   Metadata Information	Check the metadata information of LoL
   Policy Rule Information	Check the policy rule information for a Role Resources: List of resources to which the rule applies Non-Resource URLs: Non-Resource URLs are the set of partial URLs that a user must access * is allowed, but only as the final segment of the entire path Since non-resource URLs are not namespaced, this field can only be applied to a ClusterRole referenced by a ClusterRoleBinding A rule can apply to an API resource (e.g., “pods” or “secrets”) or a non-resource URL path (e.g., “/api”), but not to both Resource Names: Resource names are an optional whitelist of names to which the rule applies; an empty set means everything is allowed Verbs: Verbs are the API actions used in resource requests such as get, list, create, update, path, watch, delete, deletecollection For more details, see the Kubernetes official documentation > API Verbs

   Table. Role detailed information items

Delete role

To delete the role, follow the steps below.

1. Click the All Services > Container > Kubernetes Engine menu. 1. Go to the Service Home page of Kubernetes Engine.
2. On the Service Home page, click Role under the Permissions menu. 2. Go to the Role List page.
3. On the Roll List page, select the cluster and namespace from the list at the top left, then click View.
4. On the Role List page, select the item you want to delete. 4. Navigate to the Roll Details page.
5. On the Roll Details page, click Delete Roll.
6. When the Notification dialog appears, click the Confirm button.

Managing Role Bindings

You can create and manage role bindings by linking a role to a specific subject.

Create Role Binding

To create a roll binding, follow these steps.

1. Click the All Services > Container > Kubernetes Engine menu. 1. Go to the Service Home page of Kubernetes Engine.
2. On the Service Home page, click Role Binding under the Permissions menu. 2. Go to the Roll Binding List page.
3. On the Roll Binding List page, select the cluster and namespace from the list at the top left, then click Create Object.
4. In the Object Creation Popup, enter the object information and click the Create button.

Check detailed information of role binding

To view detailed Roll Binding information, follow these steps.

1. Click the All Services > Container > Kubernetes Engine menu. 1. Go to the Service Home page of Kubernetes Engine.
2. On the Service Home page, click Role Binding under the Permissions menu. 2. Go to the Roll Binding List page.
3. On the Roll Binding List page, select the cluster and namespace from the list in the upper left, then click Search.
4. Roll Binding List page, select the item you want to view detailed information for. 4. Go to the Roll Binding Details page.
   • If you select Show System Objects at the top of the list, all items except the Kubernetes object entries will be displayed.
5. Click each tab to view the service information.

   Category	Detailed description
   Delete roll binding	Delete roll binding
   Detailed Information	View detailed information of roll binding
   YAML	The resource file of RollBinding can be edited in a YAML editor Click the Edit button, edit the resource, and then click the Done button to apply the changes When editing content, click the Diff button to view the changes
   event	Check events that occurred within the role binding
   Account information	Check basic information about the Account, such as its name, location, and creation date/time.
   Metadata Information	Check the metadata information of the roll binding
   Role/Target Information	Check the role’s responsibilities and target information.

   Table. RoleBinding detailed information items

Delete Role Binding

To delete the roll binding, follow the steps below.

1. Click the All Services > Container > Kubernetes Engine menu. 1. Go to the Service Home page of Kubernetes Engine.
2. On the Service Home page, click Role Binding under the Permissions menu. 2. Go to the Roll Binding List page.
3. On the Roll Binding List page, select the cluster and namespace from the list in the upper left, then click View.
4. Select the item you want to delete on the Roll Binding List page. 4. Go to the Roll Binding Details page.
5. On the Roll Binding Details page, click Delete Roll Binding.
6. Notification dialog appears, click the Confirm button.