Kubernetes Security Simplified | Role, ClusterRole, RBAC, RoleBinding, IRSA, Service Account

Подписаться 110 тыс.

Просмотров 44 тыс.

50% 1

Kubernetes security can be confusing. In this video, we dive deep and understand Kubernetes security concepts - ClusterRole, Service Account, ClusterRoleBinding, Role, Role Vs ClusterRole, RoleBinding, IRSA. Difference between Application Security Vs User Security.
💰👨‍🎓 Get my courses with max discount and 30 day moneyback guarantee: bit.ly/3Eku9RH
🙏Please Subscribe: bit.ly/2Yk0Kbb
*Connect with me*
🤳 Instagram: / cloudwithraj
🏢 LinkedIN: / cloudwithraj
🐦Twitter: / cloudwithraj
🖼 Facebook: / cloudwithraj

Наука

Опубликовано:

3 авг 2024

Ссылка:

Скачать:

Готовим ссылку...

Добавить в:

Мой плейлист

Посмотреть позже

Комментарии : 68

@Lawrence_Femi_Ikenna_Odedina 3 года назад

Dude, Thank you and I love you for breaking things down that even a person like me can understand.

@rohanrustagi7857 Год назад

YES EVEN AN IDIOT LIKE ME ABLE TO UNDERSTAND WHATS THE DIFF BETWEEN ROLE AND CLUSTER ROLE. THANKS SIR

@maheshsawaiker2492 3 года назад

awesome..just what is needed in minimal time.

@1234mytubeuser1234 3 года назад

This is very first time I am reading about K8s security topics. I did not understand it completely. It is definitely an advanced + difficult topic. But I am pretty sure no one could have explained it with such ease. Kudos to your teaching style. Subscribed right after this video!

@cloudwithraj 3 года назад

Glad it was helpful! Thanks for the kind words.

@nitalshah9523 Год назад

This is the best explanation of Kubernetes Security

@peterm9893 2 года назад

I already know all the K8 specific terminology .. etc really well for on-prem, but I wasn't exactly sure how that ties into AWS, and there goes your video boom ... I totally get it now. many thanks indeed !

@cloudwithraj 2 года назад

Glad it was helpful!

@cantbefooled8044 Год назад

this is the best explanation of k8s subjects like wow.. thank you so much

@vvsiva007 3 года назад

Nice - to the point !!!

@elad3958 2 года назад

dude your saving my day right now lol. Masterful.

@idabagusdiazagasatya9900 11 месяцев назад

Wow now it all makes sense thanks raj

@kennethcorradine2447 2 года назад

Too much interesting info. to be digested by my brain in just a few minutes ! good job

@cloudwithraj 2 года назад

Glad you enjoyed it!

@CarlaJenkinsTV 4 года назад

Thanks for that clear explanation.

@cloudwithraj 4 года назад

Glad you found this video helpful. Thanks for watching!

@gknsmsk 3 месяца назад

amazing explanation thx

@nguyenthanhdat93 3 года назад

Love the way you present the information. Very intuitive and easy to follow. Keep up your good work!!!!!

@Ramesh7534 Год назад

very clear explanation.

@arpitgupta8687 2 года назад

It make me feel lot more clearer in terms of concept, thanks Buddy

@cloudwithraj 2 года назад

Most welcome 😊

@cambellajoe Год назад

Just one video and it made everything clear. Impressive !!!

@cloudwithraj 11 месяцев назад

Glad it helped!

@87rushi 2 года назад

Awesome!!! very nicely explained .. thank you!

@cloudwithraj 2 года назад

Glad you liked it

@madeeshafernando8496 3 года назад

Excellent.

@cloudwithraj 3 года назад

Many thanks!

@AnkitSingh-yh9bq 2 года назад

You are "kube-god" ,thanks for saving us from complexity

@cloudwithraj 2 года назад

You are most welcome

@akinwaleakinsete9781 2 года назад

Thanks. this is clearly explained.

@cloudwithraj 2 года назад

Glad it was helpful!

@durbabanik3372 6 месяцев назад

you are awesome

@YouTubers-rj9xv 3 года назад

nice explanation

@cloudwithraj 3 года назад

Thanks and welcome

@nagadeepkodali1151 3 года назад

nice overview👏👏

@cloudwithraj 3 года назад

Thank you! 👍

@AK_sheikh933 2 года назад

I must say i don’t find this level of explanations anywhere.

@krisam12345 3 года назад

Can we create a cluster role for Daemonset, statefulset etc?

@flesz_ Год назад

I have 2 questions 1. If I was to create ingress and map it to the service, what kind of service type do I have to configure, clusterIP or nodeport ? 2. If I am using imperative commands and want to create service, what's the advantage of using kubectl create service over kubectl expose ?

@moinsyed195 2 года назад

Hi Raj bro, Please make video on how to access EKS or kubernetes cluster remotely And login user should create pods only How it’s done can you please make video on it

@Hanushbalanshorts_24 Год назад

your videos are very helpful in understanding the concepts and progressing in interviews, great , keep going, I am looking for kubernetes backup and restore topic, pls share the link if you have the video for this topic

@cloudwithraj Год назад

Thank you, I will keep this in mind for future videos

@pro-villager5689 2 года назад

So since the role is namespaced so is it true to say it is non reusable for other namespaces

@harshamucherla4430 2 года назад

Hi Raj, I am using irsa to link the iam role to service account. For that, I am just annotating the service account with iam role arn. But that setup is not working. Any idea on what other steps to perform in order that to work. Please advice.

@dummerducky3496 3 года назад

so what is the outcome of service account in usecase

@bhupathivarma9170 3 года назад

Pls help to do video on below. 1.IAM role for pods to be able to access EFS. 2. IAM role for cluster-auto scaler. 3. IAM role for alb-ingress controller

@cloudwithraj 3 года назад

Thanks Bhupathi, will keep this in mind for future videos

@sabirmoglad6070 3 года назад

Very clear explanation, any discount code for the course?

@sujeetkumar. 2 года назад

Thank you so much. You cleared all my doubts regarding this.

@JagdishKumar-tj9iw 2 года назад

thank you! very much . Love the way you present the information very useful

@cloudwithraj 2 года назад

Glad it was helpful Jagdish!

@dummerducky3496 3 года назад

why someone want to associate serviceaccount to rolebinding for

@galeop Год назад

14:18 what is the point of this mapping of my K8s user to an AWS IAM user ? Is it to grant to my K8s-user rights to access AWS resources from K8s, or is it to specify that AWS IAM is the identity provider for that K8s user ?

@cloudwithraj Год назад

The later. Since you are logged in to AWS as an IAM user, EKS needs a way to know what kubernetes user that IAM user is logged to. If you are running commands to access AWS resources from inside a pod, it'd use the IRSA of the pod and not the user IAM creds. Similar to if you run AWS commands from inside an EC2. Hope this helps.

@galeop Год назад

@@cloudwithraj thanks!

@AmitSehgalster 3 года назад

Coupon doesn’t seems to be working now. Is it expired ?

@sashankavrnable 3 года назад

any discount code for the EKS course in udemy? Please provide thank you ?

@cloudwithraj 3 года назад

here you go Sashank - www.udemy.com/course/rocking-kubernetes-with-amazon-eks-fargate-and-devops/?couponCode=GETEKSNOTCORONA

@sabirmoglad6070 3 года назад

@@cloudwithraj this one expired, any other code

@vickygowda2856 3 года назад

Raj can you provide the link for manifest files

@cloudwithraj 3 года назад

Here you go Bharath - github.com/saha-rajdeep/eks-demos

@vickygowda2856 3 года назад

@@cloudwithraj Thanks buddy

@nitaprasad3855 2 года назад

What is kubelogin?

@airminghk 2 года назад

Awesome! I enrolled your EKS course in Udemy as well.

@cloudwithraj 2 года назад

Awesome, thank you Frankie for the support!

@saikatchakrabortty 3 года назад

is it only me or the person has a mixed accent? Liked the content though, just the accent tickling in-ear all the time 😅

@cloudwithraj 3 года назад

Thanks Saikat. My accent is stuck in-between haha. I grew up in Kolkata (I assume you are bengali too looking at your name) and in US for last 16 years with an american spouse, hence the in-between accent. Thanks for the kind words and thanks for watching 🙏.