Security

Security provides operations engineers with visual RBAC management for ServiceAccount, Role, RoleBinding, ClusterRole, and ClusterRoleBinding.

Access path: Left sidebar K8s Cluster Management > Security.

ServiceAccount

Viewing the ServiceAccount List

1. Navigate to K8s Cluster Management > Security > ServiceAccount.
2. The list displays: name, namespace, and creation time.
3. Use the top search box to filter by name and namespace.

ServiceAccount Details

1. Click a name to enter the detail page.
2. Overview: creation time, UID, owner links, labels/annotations.
3. YAML: edit online and save.
4. Related Resources: associated Secret, RoleBinding, Pod, and more.
5. History: change records with YAML diff comparison, error detail viewing, and rollback support.
6. Events: related K8s events.

Managing ServiceAccounts

1. Click "Delete" in the list row or detail page, enter the name to confirm.
2. Select multiple rows and click "Batch Delete."
3. Supports CSV export, Describe modal, and manual refresh.

Role

Viewing the Role List

1. Navigate to K8s Cluster Management > Security > Role.
2. The list displays: name, namespace, and creation time.
3. Use the top search box to filter by name and namespace.

Role Details

1. Click a name to enter the detail page.
2. Overview: creation time, UID, owner links, rules list, labels/annotations.
3. YAML: edit online and save.
4. Related Resources: associated RoleBinding.
5. History: change records with diff comparison and rollback support.
6. Events: related K8s events.

Managing Roles

1. Click "Delete" in the list row or detail page, enter the name to confirm.
2. Select multiple rows and click "Batch Delete."
3. Supports CSV export, Describe modal, and manual refresh.

RoleBinding

Viewing the RoleBinding List

1. Navigate to K8s Cluster Management > Security > RoleBinding.
2. The list displays: name, namespace, and creation time.
3. Use the top search box to filter by name and namespace.

RoleBinding Details

1. Click a name to enter the detail page.
2. Overview: creation time, UID, owner links, bound role/subject, labels/annotations.
3. YAML: edit online and save.
4. Related Resources: associated Role/ClusterRole, ServiceAccount/User/Group.
5. History: change records with diff comparison and rollback support.
6. Events: related K8s events.

Managing RoleBindings

1. Click "Delete" in the list row or detail page, enter the name to confirm.
2. Select multiple rows and click "Batch Delete."
3. Supports CSV export, Describe modal, and manual refresh.

ClusterRole

Viewing the ClusterRole List

1. Navigate to K8s Cluster Management > Security > ClusterRole.
2. The list displays: name and creation time.
3. Use the top search box to filter by name.

ClusterRole Details

1. Click a name to enter the detail page.
2. Overview: creation time, UID, owner links, rules list, labels/annotations.
3. YAML: edit online and save.
4. Related Resources: associated ClusterRoleBinding.
5. Change History: change records and rollback.
6. Events: related K8s events.

Managing ClusterRoles

1. Click "Delete" in the list row or detail page, enter the name to confirm.
2. Select multiple rows and click "Batch Delete."
3. Supports CSV export, Describe modal, and manual refresh.

ClusterRoleBinding

Viewing the ClusterRoleBinding List

1. Navigate to K8s Cluster Management > Security > ClusterRoleBinding.
2. The list displays: name and creation time.
3. Use the top search box to filter by name.

ClusterRoleBinding Details

1. Click a name to enter the detail page.
2. Overview: creation time, UID, owner links, bound cluster role/subject, labels/annotations.
3. YAML: edit online and save.
4. Related Resources: associated ClusterRole, ServiceAccount/User/Group.
5. Change History: change records and rollback.
6. Events: related K8s events.

Managing ClusterRoleBindings

1. Click "Delete" in the list row or detail page, enter the name to confirm.
2. Select multiple rows and click "Batch Delete."
3. Supports CSV export, Describe modal, and manual refresh.

FAQ

Q: Deleting a Role prompts that there is an associated RoleBinding? A: First delete the RoleBinding that references this Role, or modify the RoleBinding to reference a different role.

Q: What is the difference between ClusterRole and Role? A: Role is a namespace-scoped resource; its permissions only take effect within the specified namespace. ClusterRole is a cluster-scoped resource; its permissions can apply to the entire cluster or span multiple namespaces.

Q: How do I grant a user access to a specific namespace? A: Create a Role to define permissions within that namespace, then create a RoleBinding to bind the user/group/ServiceAccount to that Role.