Kubernetes Security Simplified | Role, ClusterRole, RBAC, RoleBinding, IRSA, Service Account

Kubernetes security can be confusing. In this video, we dive deep and understand Kubernetes security concepts - ClusterRole, Service Account, ClusterRoleBinding, Role, Role Vs ClusterRole, RoleBinding, IRSA. Difference between Application Security Vs User Security.

**Connect with me**

[mytubeuser]

This is very first time I am reading about K8s security topics. I did not understand it completely. It is definitely an advanced + difficult topic. But I am pretty sure no one could have explained it with such ease. Kudos to your teaching style. Subscribed right after this video!

[Lawrence_Femi_Ikenna_Odedina]

Dude, Thank you and I love you for breaking things down that even a person like me can understand.

[nitalshah]

This is the best explanation of Kubernetes Security

[PeTerVampirism]

I already know all the K8 specific terminology .. etc really well for on-prem, but I wasn't exactly sure how that ties into AWS, and there goes your video boom ... I totally get it now. many thanks indeed !

[cantbefooled]

this is the best explanation of k8s subjects like wow.. thank you so much

[cambellajoe]

Just one video and it made everything clear. Impressive !!!

[kennethcorradine]

Too much interesting info. to be digested by my brain in just a few minutes ! good job

[galeop]

14:18 what is the point of this mapping of my K8s user to an AWS IAM user ? Is it to grant to my K8s-user rights to access AWS resources from K8s, or is it to specify that AWS IAM is the identity provider for that K8s user ?

[arpitgupta]

It make me feel lot more clearer in terms of concept,
thanks Buddy

[nguyenthanhdat]

Love the way you present the information. Very intuitive and easy to follow.

Keep up your good

[elad]

dude your saving my day right now lol. Masterful.

[maheshsawaiker]

awesome..just what is needed in minimal time.

[samsonv]

Raj - Great explanation, thank you! 🙏🏼

[pro-villager]

So since the role is namespaced so is it true to say it is non reusable for other namespaces

[flesz_]

I have 2 questions
1. If I was to create ingress and map it to the service, what kind of service type do I have to configure, clusterIP or nodeport ?
2. If I am using imperative commands and want to create service, what's the advantage of using kubectl create service over kubectl expose ?

[harshamucherla]

Hi Raj, I am using irsa to link the iam role to service account. For that, I am just annotating the service account with iam role arn. But that setup is not working. Any idea on what other steps to perform in order that to work. Please advice.

[AnkitSingh-yhbq]

You are "kube-god", thanks for saving us from complexity

[rushi]

Awesome!!! very nicely explained .. thank you!

[moinsyed]

Hi Raj bro,
Please make video on how to access EKS or kubernetes cluster remotely
And login user should create pods only
How it’s done can you please make video on it

[Hanushbalanshorts_]

your videos are very helpful in understanding the concepts and progressing in interviews, great, keep going, I am looking for kubernetes backup and restore topic, pls share the link if you have the video for this topic