{"id":5199,"date":"2026-05-27T16:00:00","date_gmt":"2026-05-27T12:30:00","guid":{"rendered":"https:\/\/hamravesh.com\/blog\/?p=5199"},"modified":"2026-05-30T11:50:38","modified_gmt":"2026-05-30T08:20:38","slug":"what-is-kubernetes-rbac","status":"publish","type":"post","link":"https:\/\/hamravesh.com\/blog\/what-is-kubernetes-rbac\/","title":{"rendered":"RBAC \u062f\u0631 \u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632 \u0686\u06cc\u0633\u062a\u061f \u0622\u0634\u0646\u0627\u06cc\u06cc \u0628\u0627 \u0627\u062c\u0632\u0627 \u0648 \u0631\u0648\u0634\u200c\u0647\u0627\u06cc \u067e\u06cc\u0627\u062f\u0647\u200c\u0633\u0627\u0632\u06cc"},"content":{"rendered":"\n<p>RBAC \u062f\u0631 \u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632 \u06cc\u06a9\u06cc \u0627\u0632 \u0627\u0635\u0644\u06cc\u200c\u062a\u0631\u06cc\u0646 \u0645\u06a9\u0627\u0646\u06cc\u0632\u0645\u200c\u0647\u0627\u06cc \u06a9\u0646\u062a\u0631\u0644 \u062f\u0633\u062a\u0631\u0633\u06cc \u062f\u0631 \u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632 \u0627\u0633\u062a \u06a9\u0647 \u062a\u0639\u06cc\u06cc\u0646 \u0645\u06cc\u200c\u06a9\u0646\u062f \u0647\u0631 \u06a9\u0627\u0631\u0628\u0631\u060c \u0633\u0631\u0648\u06cc\u0633 \u06cc\u0627 \u0628\u0631\u0646\u0627\u0645\u0647 \u0686\u0647 \u0639\u0645\u0644\u06cc\u0627\u062a\u06cc \u0631\u0627 \u0631\u0648\u06cc \u0645\u0646\u0627\u0628\u0639 \u06a9\u0644\u0627\u0633\u062a\u0631 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0627\u0646\u062c\u0627\u0645 \u062f\u0647\u062f. \u0627\u06cc\u0646 \u0633\u06cc\u0633\u062a\u0645 \u0628\u0627 \u062a\u06a9\u06cc\u0647 \u0628\u0631 \u0646\u0642\u0634\u200c\u0647\u0627 (Role \u0648 ClusterRole) \u0648 \u0627\u062a\u0635\u0627\u0644 \u0622\u0646\u200c\u0647\u0627 \u0628\u0647 \u0647\u0648\u06cc\u062a\u200c\u0647\u0627 (RoleBinding \u0648 ClusterRoleBinding)\u060c \u0644\u0627\u06cc\u0647 Authorization \u062f\u0631 API Server \u0631\u0627 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0645\u06cc\u200c\u06a9\u0646\u062f \u0648 \u0646\u0642\u0634 \u06a9\u0644\u06cc\u062f\u06cc \u062f\u0631 \u067e\u06cc\u0627\u062f\u0647\u200c\u0633\u0627\u0632\u06cc \u0627\u0635\u0644 \u062d\u062f\u0627\u0642\u0644 \u0633\u0637\u062d \u062f\u0633\u062a\u0631\u0633\u06cc \u062f\u0627\u0631\u062f. \u062f\u0631 \u0627\u06cc\u0646 \u0645\u0642\u0627\u0644\u0647\u060c \u0633\u0627\u062e\u062a\u0627\u0631\u060c \u0646\u062d\u0648\u0647 \u0639\u0645\u0644\u06a9\u0631\u062f\u060c \u0627\u062c\u0632\u0627\u06cc \u0627\u0635\u0644\u06cc\u060c \u0645\u062b\u0627\u0644 \u0639\u0645\u0644\u06cc \u067e\u06cc\u0627\u062f\u0647\u200c\u0633\u0627\u0632\u06cc \u0648 \u0645\u062d\u062f\u0648\u062f\u06cc\u062a\u200c\u0647\u0627\u06cc RBAC \u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632 \u0631\u0627 \u0628\u0647\u200c\u0635\u0648\u0631\u062a \u062f\u0642\u06cc\u0642 \u0628\u0631\u0631\u0633\u06cc \u0645\u06cc\u200c\u06a9\u0646\u06cc\u0645.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-rbac-\u062f\u0631-\u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632-\u0686\u06cc\u0633\u062a\">RBAC \u062f\u0631 \u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632 \u0686\u06cc\u0633\u062a\u061f<\/h2>\n\n\n\n<p>RBAC \u0645\u062e\u0641\u0641 Role-Based Access Control \u06cc\u0627 \u00ab\u06a9\u0646\u062a\u0631\u0644 \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u0628\u062a\u0646\u06cc \u0628\u0631 \u0646\u0642\u0634\u00bb \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0645\u06a9\u0627\u0646\u06cc\u0632\u0645 \u0627\u0645\u0646\u06cc\u062a\u06cc \u062f\u0631 \u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632 \u0645\u0634\u062e\u0635 \u0645\u06cc\u200c\u06a9\u0646\u062f \u06a9\u0647 \u0647\u0631 \u06a9\u0627\u0631\u0628\u0631\u060c \u0633\u0631\u0648\u06cc\u0633 \u06cc\u0627 \u0628\u0631\u0646\u0627\u0645\u0647 \u0686\u0647 \u0639\u0645\u0644\u06cc\u0627\u062a\u06cc \u0631\u0627 \u0631\u0648\u06cc \u06a9\u062f\u0627\u0645 \u0645\u0646\u0627\u0628\u0639 \u06a9\u0644\u0627\u0633\u062a\u0631 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0627\u0646\u062c\u0627\u0645 \u062f\u0647\u062f.<\/p>\n\n\n\n<p>\u062f\u0631 \u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632\u060c \u062a\u0645\u0627\u0645 \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u200c\u0647\u0627 \u0627\u0632 \u0637\u0631\u06cc\u0642 API Server \u067e\u0631\u062f\u0627\u0632\u0634 \u0645\u06cc\u200c\u0634\u0648\u0646\u062f \u0648 \u0633\u06cc\u0633\u062a\u0645 RBAC \u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632 \u0648\u0638\u06cc\u0641\u0647 \u062f\u0627\u0631\u062f \u0633\u0637\u062d \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u06cc\u0646 \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u200c\u0647\u0627 \u0631\u0627 \u06a9\u0646\u062a\u0631\u0644 \u06a9\u0646\u062f. \u0628\u0647\u200c\u06a9\u0645\u06a9 \u0627\u06cc\u0646 \u0645\u06a9\u0627\u0646\u06cc\u0632\u0645 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646 \u062a\u0639\u06cc\u06cc\u0646 \u06a9\u0631\u062f \u06a9\u0647 \u06cc\u06a9 \u0647\u0648\u06cc\u062a \u0645\u0634\u062e\u0635 \u0686\u0647 \u0645\u0646\u0627\u0628\u0639\u06cc \u0631\u0627 \u0645\u0634\u0627\u0647\u062f\u0647 \u06a9\u0646\u062f\u060c \u0686\u0647 \u0639\u0645\u0644\u06cc\u0627\u062a\u06cc \u0627\u0646\u062c\u0627\u0645 \u062f\u0647\u062f \u0648 \u0627\u06cc\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u062f\u0631 \u06a9\u062f\u0627\u0645 Namespace \u06cc\u0627 \u062f\u0631 \u0633\u0637\u062d \u06a9\u0644 \u06a9\u0644\u0627\u0633\u062a\u0631 \u0645\u0639\u062a\u0628\u0631 \u0628\u0627\u0634\u062f. \u0628\u0631\u0627\u06cc \u0645\u062b\u0627\u0644\u060c \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 RBAC \u062f\u0631 \u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646 \u0628\u0647 \u06cc\u06a9 \u062a\u0648\u0633\u0639\u0647\u200c\u062f\u0647\u0646\u062f\u0647 \u0641\u0642\u0637 \u0627\u062c\u0627\u0632\u0647 \u0645\u0634\u0627\u0647\u062f\u0647 Pod\u0647\u0627 \u062f\u0631 Namespace \u062a\u0648\u0633\u0639\u0647 (Dev) \u0631\u0627 \u062f\u0627\u062f\u061b \u0628\u062f\u0648\u0646 \u0627\u06cc\u0646\u06a9\u0647 \u0628\u0647 \u0645\u0646\u0627\u0628\u0639 \u0645\u062d\u06cc\u0637 Production \u062f\u0633\u062a\u0631\u0633\u06cc \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u062f.<\/p>\n\n\n\n<p>\u0633\u06cc\u0633\u062a\u0645 RBAC \u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632 \u0641\u0642\u0637 \u0628\u0631\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0627\u0646\u0633\u0627\u0646\u06cc \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0646\u0645\u06cc\u200c\u0634\u0648\u062f \u0648 \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0647\u0627 \u0648 Pod\u0647\u0627\u06cc \u062f\u0627\u062e\u0644 \u06a9\u0644\u0627\u0633\u062a\u0631 \u0646\u06cc\u0632 \u0627\u0632 \u0637\u0631\u06cc\u0642 Service Account\u0647\u0627 \u0628\u0627 \u0647\u0645\u06cc\u0646 \u0645\u06a9\u0627\u0646\u06cc\u0632\u0645 \u0627\u062d\u0631\u0627\u0632 \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u06cc\u200c\u0634\u0648\u0646\u062f.<\/p>\n\n\n\n<p>\u0628\u0647\u200c\u0637\u0648\u0631 \u06a9\u0644\u06cc\u060c RBAC \u0627\u0633\u062a\u0627\u0646\u062f\u0627\u0631\u062f\u062a\u0631\u06cc\u0646 \u0631\u0648\u0634 \u0645\u062f\u06cc\u0631\u06cc\u062a \u062f\u0633\u062a\u0631\u0633\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062f\u0631 \u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632 \u0627\u0633\u062a \u0648 \u0646\u0642\u0634 \u0645\u0647\u0645\u06cc \u062f\u0631 \u067e\u06cc\u0627\u062f\u0647\u200c\u0633\u0627\u0632\u06cc \u0627\u0635\u0644 Least Privilege \u06cc\u0627 \u00ab\u062d\u062f\u0627\u0642\u0644 \u0633\u0637\u062d \u062f\u0633\u062a\u0631\u0633\u06cc\u00bb \u062f\u0627\u0631\u062f.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-\u062a\u0641\u0627\u0648\u062a-authentication-\u0648-authorization-\u062f\u0631-kubernetes\"><a><\/a>\u062a\u0641\u0627\u0648\u062a Authentication \u0648 Authorization \u062f\u0631 Kubernetes<\/h2>\n\n\n\n<p>\u0628\u0631\u0627\u06cc \u062f\u0631\u06a9 \u062c\u0627\u06cc\u06af\u0627\u0647 RBAC \u062f\u0631 \u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632\u060c \u0627\u0628\u062a\u062f\u0627 \u0628\u0627\u06cc\u062f \u062a\u0641\u0627\u0648\u062a Authentication (\u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a) \u0648 Authorization (\u062a\u0639\u06cc\u06cc\u0646 \u0633\u0637\u062d \u062f\u0633\u062a\u0631\u0633\u06cc) \u0631\u0627 \u0628\u062f\u0627\u0646\u06cc\u062f. \u0647\u0631 \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u06cc \u06a9\u0647 \u0628\u0647 API Server \u06a9\u0644\u0627\u0633\u062a\u0631 \u0627\u0631\u0633\u0627\u0644 \u0645\u06cc\u200c\u0634\u0648\u062f\u060c \u0627\u0628\u062a\u062f\u0627 \u0647\u0648\u06cc\u062a \u0641\u0631\u0633\u062a\u0646\u062f\u0647 \u0631\u0627 \u0628\u0631\u0631\u0633\u06cc \u0645\u06cc\u200c\u06a9\u0646\u062f \u0648 \u0633\u067e\u0633 \u0633\u0637\u062d \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0648 \u0631\u0627 \u0645\u06cc\u200c\u0633\u0646\u062c\u062f.<\/p>\n\n\n\n<p><strong>\u0645\u0631\u062d\u0644\u0647 \u0627\u0648\u0644\u060c Authentication: <\/strong>\u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632 \u0645\u0634\u062e\u0635 \u0645\u06cc\u200c\u06a9\u0646\u062f \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0627\u0632 \u0637\u0631\u0641 \u0686\u0647 \u06a9\u0627\u0631\u0628\u0631\u06cc\u060c \u0633\u0631\u0648\u06cc\u0633 \u06cc\u0627 \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0627\u06cc \u0627\u0631\u0633\u0627\u0644 \u0634\u062f\u0647 \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0641\u0631\u0627\u06cc\u0646\u062f \u0645\u0639\u0645\u0648\u0644\u0627\u064b \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u062a\u0648\u06a9\u0646\u200c\u0647\u0627\u060c Client Certificate\u0647\u0627 \u06cc\u0627 \u0633\u0631\u0648\u06cc\u0633\u200c\u0647\u0627\u06cc \u0647\u0648\u06cc\u062a \u062e\u0627\u0631\u062c\u06cc \u0627\u0646\u062c\u0627\u0645 \u0645\u06cc\u200c\u0634\u0648\u062f. \u0627\u06af\u0631 \u0647\u0648\u06cc\u062a \u0641\u0631\u0633\u062a\u0646\u062f\u0647 \u062a\u0623\u06cc\u06cc\u062f \u0646\u0634\u0648\u062f\u060c \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0628\u0627 \u062e\u0637\u0627\u06cc HTTP 401 Unauthorized \u0631\u062f \u062e\u0648\u0627\u0647\u062f \u0634\u062f.<\/p>\n\n\n\n<p><strong>\u0645\u0631\u062d\u0644\u0647 \u062f\u0648\u0645\u060c Authorization: <\/strong>\u067e\u0633 \u0627\u0632 \u062a\u0623\u06cc\u06cc\u062f \u0647\u0648\u06cc\u062a\u060c \u0645\u0631\u062d\u0644\u0647 Authorization \u06cc\u0627 \u0622\u063a\u0627\u0632 \u0645\u06cc\u200c\u0634\u0648\u062f. \u062f\u0631 \u0627\u06cc\u0646 \u0645\u0631\u062d\u0644\u0647\u060c \u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632 \u0628\u0631\u0631\u0633\u06cc \u0645\u06cc\u200c\u06a9\u0646\u062f \u06a9\u0647 \u0622\u06cc\u0627 \u0627\u06cc\u0646 \u0647\u0648\u06cc\u062a\u060c \u0627\u062c\u0627\u0632\u0647 \u0627\u0646\u062c\u0627\u0645 \u0639\u0645\u0644\u06cc\u0627\u062a \u0645\u0648\u0631\u062f\u0646\u0638\u0631 \u0631\u0627 \u062f\u0627\u0631\u062f \u06cc\u0627 \u062e\u06cc\u0631. \u0627\u06cc\u0646\u062c\u0627\u0633\u062a \u06a9\u0647 RBAC \u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632 \u0648\u0627\u0631\u062f \u0639\u0645\u0644 \u0645\u06cc\u200c\u0634\u0648\u062f \u0648 \u0628\u0631 \u0627\u0633\u0627\u0633 Role\u0647\u0627 \u0648 Binding\u0647\u0627\u06cc \u062a\u0639\u0631\u06cc\u0641\u200c\u0634\u062f\u0647\u060c \u0645\u062c\u0648\u0632 \u062f\u0633\u062a\u0631\u0633\u06cc \u0631\u0627 \u0635\u0627\u062f\u0631 \u06cc\u0627 \u0631\u062f \u0645\u06cc\u200c\u06a9\u0646\u062f. \u062f\u0631 \u0635\u0648\u0631\u062a \u0646\u062f\u0627\u0634\u062a\u0646 \u0645\u062c\u0648\u0632 \u06a9\u0627\u0641\u06cc\u060c \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0628\u0627 \u062e\u0637\u0627\u06cc HTTP 403 Forbidden \u0645\u0648\u0627\u062c\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f.<\/p>\n\n\n\n<p>\u0628\u0631\u0627\u06cc \u062f\u0631\u06a9 \u0628\u0647\u062a\u0631 \u062a\u0641\u0627\u0648\u062a \u0627\u06cc\u0646 \u062f\u0648 \u0644\u0627\u06cc\u0647 \u0627\u0645\u0646\u06cc\u062a\u06cc\u060c \u062c\u062f\u0648\u0644 \u0632\u06cc\u0631 \u0631\u0627 \u0628\u0628\u06cc\u0646\u06cc\u062f:<br><\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td><strong>\u0648\u06cc\u0698\u06af\u06cc<\/strong><strong><\/strong><\/td><td><strong>Authentication<\/strong><strong> (\u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a)<\/strong><strong><\/strong><\/td><td><strong>Authorization<\/strong><strong> (\u062a\u0639\u06cc\u06cc\u0646 \u0633\u0637\u062d \u062f\u0633\u062a\u0631\u0633\u06cc)<\/strong><strong><\/strong><\/td><\/tr><tr><td>\u0633\u0624\u0627\u0644 \u0627\u0635\u0644\u06cc<\/td><td>\u0634\u0645\u0627 \u0686\u0647 \u06a9\u0633\u06cc \u0647\u0633\u062a\u06cc\u062f\u061f (\u062a\u0634\u062e\u06cc\u0635 \u0647\u0648\u06cc\u062a)<\/td><td>\u0645\u062c\u0627\u0632 \u0628\u0647 \u0627\u0646\u062c\u0627\u0645 \u062f\u0627\u062f\u0646 \u0686\u0647 \u06a9\u0627\u0631\u06cc \u0647\u0633\u062a\u06cc\u062f\u061f (\u0628\u0631\u0631\u0633\u06cc \u0645\u062c\u0648\u0632)<\/td><\/tr><tr><td>\u0632\u0645\u0627\u0646 \u0627\u062c\u0631\u0627<\/td><td>\u0645\u0631\u062d\u0644\u0647 \u06f1: \u0642\u0628\u0644 \u0627\u0632 \u0628\u0631\u0631\u0633\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc\u200c\u0647\u0627<\/td><td>\u0645\u0631\u062d\u0644\u0647 \u06f2: \u067e\u0633 \u0627\u0632 \u062a\u0623\u06cc\u06cc\u062f \u0647\u0648\u06cc\u062a<\/td><\/tr><tr><td>\u0648\u0638\u06cc\u0641\u0647 \u0627\u0635\u0644\u06cc<\/td><td>\u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0647\u0648\u06cc\u062a \u06a9\u0627\u0631\u0628\u0631 \u06cc\u0627 \u0633\u0631\u0648\u06cc\u0633<\/td><td>\u0628\u0631\u0631\u0633\u06cc \u0645\u062c\u0648\u0632 \u0639\u0645\u0644\u06cc\u0627\u062a<\/td><\/tr><tr><td>\u06a9\u062f \u0648\u0636\u0639\u06cc\u062a HTTP \u062f\u0631 \u0635\u0648\u0631\u062a \u0634\u06a9\u0633\u062a<\/td><td>401 Unauthorized<\/td><td>403 Forbidden<\/td><\/tr><tr><td>\u0648\u0631\u0648\u062f\u06cc\u200c\u0647\u0627\u06cc \u0633\u06cc\u0633\u062a\u0645<\/td><td>\u0647\u062f\u0631\u0647\u0627\u06cc HTTP\u060c \u06af\u0648\u0627\u0647\u06cc \u06a9\u0644\u0627\u06cc\u0646\u062a\u060c \u062a\u0648\u06a9\u0646\u200c\u0647\u0627<\/td><td>\u0646\u0627\u0645 \u06a9\u0627\u0631\u0628\u0631\u060c \u0646\u0648\u0639 \u0639\u0645\u0644\u06cc\u0627\u062a (Action)\u060c \u0645\u0646\u0628\u0639 \u0645\u0648\u0631\u062f \u0646\u0638\u0631 (Object)<\/td><\/tr><tr><td>\u062e\u0631\u0648\u062c\u06cc \u0641\u0631\u0627\u06cc\u0646\u062f<\/td><td>\u0627\u0633\u062a\u062e\u0631\u0627\u062c \u0646\u0627\u0645 \u06a9\u0627\u0631\u0628\u0631\u06cc (Username) \u06cc\u0627 \u0634\u0646\u0627\u0633\u0647 \u06af\u0631\u0648\u0647<\/td><td>\u0635\u062f\u0648\u0631 \u0627\u062c\u0627\u0632\u0647 \u062f\u0633\u062a\u0631\u0633\u06cc (Allow) \u06cc\u0627 \u0631\u062f \u0622\u0646 (Deny)<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p><\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-\u0627\u062c\u0632\u0627\u06cc-\u0627\u0635\u0644\u06cc-rbac-\u062f\u0631-\u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632\">\u0627\u062c\u0632\u0627\u06cc \u0627\u0635\u0644\u06cc RBAC \u062f\u0631 \u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632<\/h2>\n\n\n\n<p>\u0633\u06cc\u0633\u062a\u0645 RBAC \u062f\u0631 \u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632 \u0627\u0632 \u0686\u0646\u062f \u062c\u0632\u0621 \u0627\u0635\u0644\u06cc \u062a\u0634\u06a9\u06cc\u0644 \u0634\u062f\u0647 \u0627\u0633\u062a \u06a9\u0647 \u062f\u0631 \u06a9\u0646\u0627\u0631 \u0647\u0645 \u0645\u0634\u062e\u0635 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f \u0686\u0647 \u0647\u0648\u06cc\u062a\u06cc \u0686\u0647 \u0639\u0645\u0644\u06cc\u0627\u062a\u06cc \u0631\u0627 \u0631\u0648\u06cc \u06a9\u062f\u0627\u0645 \u0645\u0646\u0627\u0628\u0639 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0627\u0646\u062c\u0627\u0645 \u062f\u0647\u062f. \u0627\u06cc\u0646 \u0627\u062c\u0632\u0627 \u0639\u0628\u0627\u0631\u062a\u200c\u0627\u0646\u062f \u0627\u0632:<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Role<\/h3>\n\n\n\n<p>Role \u0645\u062c\u0645\u0648\u0639\u0647\u200c\u0627\u06cc \u0627\u0632 \u0645\u062c\u0648\u0632\u0647\u0627\u0633\u062a \u06a9\u0647 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0645\u0646\u0627\u0628\u0639 \u0631\u0627 \u062f\u0631 \u06cc\u06a9 <a href=\"https:\/\/hamravesh.com\/blog\/what-is-kubernetes-namespace\/\" type=\"link\" id=\"https:\/\/hamravesh.com\/blog\/what-is-kubernetes-namespace\/\" target=\"_blank\" rel=\"noreferrer noopener\">Namespace \u062f\u0631 \u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632<\/a> \u062a\u0639\u0631\u06cc\u0641 \u0645\u06cc\u200c\u06a9\u0646\u062f. \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 Role \u0645\u06cc\u200c\u062a\u0648\u0627\u0646 \u0645\u0634\u062e\u0635 \u06a9\u0631\u062f \u06a9\u0647 \u06cc\u06a9 \u06a9\u0627\u0631\u0628\u0631 \u06cc\u0627 Service Account \u0686\u0647 \u0639\u0645\u0644\u06cc\u0627\u062a\u06cc \u0631\u0627 \u0631\u0648\u06cc \u0645\u0646\u0627\u0628\u0639 \u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632 \u0627\u0646\u062c\u0627\u0645 \u062f\u0647\u062f.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">ClusterRole<\/h3>\n\n\n\n<p>ClusterRole \u0646\u06cc\u0632 \u0645\u062c\u0645\u0648\u0639\u0647\u200c\u0627\u06cc \u0627\u0632 \u0645\u062c\u0648\u0632\u0647\u0627 \u0631\u0627 \u062a\u0639\u0631\u06cc\u0641 \u0645\u06cc\u200c\u06a9\u0646\u062f\u060c \u0627\u0645\u0627 \u062f\u0631 \u0633\u0637\u062d \u06a9\u0644 \u06a9\u0644\u0627\u0633\u062a\u0631 \u0642\u0627\u0628\u0644 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0633\u062a \u0648 \u0645\u062d\u062f\u0648\u062f \u0628\u0647 \u06cc\u06a9 Namespace \u0645\u0634\u062e\u0635 \u0646\u06cc\u0633\u062a.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">RoleBinding<\/h3>\n\n\n\n<p>RoleBinding \u06cc\u06a9 Role \u0631\u0627 \u0628\u0647 \u06cc\u06a9 \u06a9\u0627\u0631\u0628\u0631\u060c \u06af\u0631\u0648\u0647 \u06cc\u0627 Service Account \u0645\u062a\u0635\u0644 \u0645\u06cc\u200c\u06a9\u0646\u062f. \u0627\u06cc\u0646 \u0627\u062a\u0635\u0627\u0644 \u0641\u0642\u0637 \u062f\u0631 \u0647\u0645\u0627\u0646 Namespace \u0645\u0639\u062a\u0628\u0631 \u0627\u0633\u062a \u0648 \u0645\u0634\u062e\u0635 \u0645\u06cc\u200c\u06a9\u0646\u062f \u0686\u0647 \u0647\u0648\u06cc\u062a\u06cc \u0627\u0632 \u0645\u062c\u0648\u0632\u0647\u0627\u06cc \u062a\u0639\u0631\u06cc\u0641\u200c\u0634\u062f\u0647 \u062f\u0631 Role \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u062f.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">ClusterRoleBinding<\/h3>\n\n\n\n<p>ClusterRoleBinding \u06cc\u06a9 ClusterRole \u0631\u0627 \u062f\u0631 \u0633\u0637\u062d \u06a9\u0644 \u06a9\u0644\u0627\u0633\u062a\u0631 \u0628\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646\u060c \u06af\u0631\u0648\u0647\u200c\u0647\u0627 \u06cc\u0627 Service Account\u0647\u0627 \u0645\u062a\u0635\u0644 \u0645\u06cc\u200c\u06a9\u0646\u062f. \u0627\u06cc\u0646 \u0646\u0648\u0639 Binding \u0645\u0639\u0645\u0648\u0644\u0627\u064b \u0628\u0631\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc\u200c\u0647\u0627\u06cc \u0633\u0631\u0627\u0633\u0631\u06cc \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Subjects<\/h3>\n\n\n\n<p>Subjects \u0647\u0645\u0627\u0646 \u0647\u0648\u06cc\u062a\u200c\u0647\u0627\u06cc\u06cc \u0647\u0633\u062a\u0646\u062f \u06a9\u0647 \u0645\u062c\u0648\u0632\u0647\u0627 \u0628\u0647 \u0622\u0646\u200c\u0647\u0627 \u0627\u062e\u062a\u0635\u0627\u0635 \u062f\u0627\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f. \u0627\u06cc\u0646 \u0647\u0648\u06cc\u062a\u200c\u0647\u0627 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0646\u062f \u06a9\u0627\u0631\u0628\u0631\u0627\u0646\u060c \u06af\u0631\u0648\u0647\u200c\u0647\u0627 \u06cc\u0627 Service Account\u0647\u0627\u06cc \u062f\u0627\u062e\u0644 \u06a9\u0644\u0627\u0633\u062a\u0631 \u0628\u0627\u0634\u0646\u062f.<\/p>\n\n\n\n<p>\u062f\u0631 \u062a\u0646\u0638\u06cc\u0645\u0627\u062a RBAC \u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632\u060c \u0647\u0631 Role \u06cc\u0627 ClusterRole \u0645\u0639\u0645\u0648\u0644\u0627\u064b \u0634\u0627\u0645\u0644 \u0641\u06cc\u0644\u062f\u0647\u0627\u06cc\u06cc \u0628\u0631\u0627\u06cc \u062a\u0639\u06cc\u06cc\u0646 \u0645\u0646\u0627\u0628\u0639 \u0648 \u0646\u0648\u0639 \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0633\u062a. \u0628\u0631\u0627\u06cc \u0645\u062b\u0627\u0644\u060c \u0641\u06cc\u0644\u062f <code>verbs<\/code> \u0645\u0634\u062e\u0635 \u0645\u06cc\u200c\u06a9\u0646\u062f \u06cc\u06a9 \u0647\u0648\u06cc\u062a \u0686\u0647 \u0639\u0645\u0644\u06cc\u0627\u062a\u06cc \u0645\u0627\u0646\u0646\u062f <code>get<\/code> \u060c<code>list<\/code> \u060c<code>create<\/code> \u06cc\u0627 <code>delete<\/code> \u0631\u0627 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0627\u0646\u062c\u0627\u0645 \u062f\u0647\u062f.<\/p>\n\n\n\n<p>\u0647\u0645\u0686\u0646\u06cc\u0646 \u0641\u06cc\u0644\u062f <code>apiGroups<\/code> \u0628\u0631\u0627\u06cc \u062a\u0639\u06cc\u06cc\u0646 \u06af\u0631\u0648\u0647 API \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0647\u0631 \u0645\u0646\u0628\u0639 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f. \u062f\u0631 \u0645\u0646\u0627\u0628\u0639 \u0627\u0635\u0644\u06cc \u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632 \u0645\u0627\u0646\u0646\u062f Pod \u0648 Service \u0645\u0639\u0645\u0648\u0644\u0627\u064b \u0645\u0642\u062f\u0627\u0631 \u0622\u0646 \u0628\u0647\u200c\u0635\u0648\u0631\u062a \u0631\u0634\u062a\u0647 \u062e\u0627\u0644\u06cc <code>\"\"<\/code> \u0646\u0648\u0634\u062a\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f\u060c \u0627\u0645\u0627 \u0628\u0631\u0627\u06cc \u0645\u0646\u0627\u0628\u0639\u06cc \u0645\u0627\u0646\u0646\u062f <a href=\"https:\/\/hamravesh.com\/blog\/what-is-kubernetes-deployment\/\" type=\"link\" id=\"https:\/\/hamravesh.com\/blog\/what-is-kubernetes-deployment\/\" target=\"_blank\" rel=\"noreferrer noopener\">Deployment \u062f\u0631 \u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632<\/a> \u0627\u0632 \u06af\u0631\u0648\u0647\u200c\u0647\u0627\u06cc\u06cc \u0645\u0627\u0646\u0646\u062f <code>apps<\/code> \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-\u062a\u0641\u0627\u0648\u062a-role-\u0648-clusterrole-\u0645\u0631\u0632-\u0645\u06cc\u0627\u0646-namespace-\u0648-\u06a9\u0644\u0627\u0633\u062a\u0631\">\u062a\u0641\u0627\u0648\u062a Role \u0648 ClusterRole\u061b \u0645\u0631\u0632 \u0645\u06cc\u0627\u0646 Namespace \u0648 \u06a9\u0644\u0627\u0633\u062a\u0631<\/h2>\n\n\n\n<p>\u0627\u0635\u0644\u06cc\u200c\u062a\u0631\u06cc\u0646 \u062a\u0641\u0627\u0648\u062a Role \u0648 ClusterRole \u062f\u0631 Kubernetes\u060c \u0645\u062d\u062f\u0648\u062f\u0647 \u062f\u0633\u062a\u0631\u0633\u06cc \u06cc\u0627 Scope \u0622\u0646\u200c\u0647\u0627\u0633\u062a. Role \u0641\u0642\u0637 \u062f\u0631 \u06cc\u06a9 Namespace \u0645\u0634\u062e\u0635 \u0645\u0639\u062a\u0628\u0631 \u0627\u0633\u062a \u0648 \u0645\u062c\u0648\u0632\u0647\u0627\u06cc \u062a\u0639\u0631\u06cc\u0641\u200c\u0634\u062f\u0647 \u062f\u0631 \u0622\u0646 \u062e\u0627\u0631\u062c \u0627\u0632 \u0647\u0645\u0627\u0646 Namespace \u0627\u0639\u0645\u0627\u0644 \u0646\u0645\u06cc\u200c\u0634\u0648\u0646\u062f. \u0628\u0631\u0627\u06cc \u0645\u062b\u0627\u0644\u060c \u0627\u06af\u0631 \u06a9\u0627\u0631\u0628\u0631\u06cc \u062f\u0631 Namespace \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0645\u062d\u06cc\u0637 \u062a\u0648\u0633\u0639\u0647 (dev) \u0627\u062c\u0627\u0632\u0647 \u0645\u0634\u0627\u0647\u062f\u0647 \u067e\u0627\u062f\u0647\u0627 \u0631\u0627 \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u062f\u060c \u0627\u06cc\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u062f\u0631 Namespace \u0645\u062d\u06cc\u0637 Production \u0645\u0639\u062a\u0628\u0631 \u0646\u062e\u0648\u0627\u0647\u062f \u0628\u0648\u062f.<\/p>\n\n\n\n<p>\u062f\u0631 \u0645\u0642\u0627\u0628\u0644\u060c ClusterRole \u062f\u0631 \u0633\u0637\u062d \u06a9\u0644 \u06a9\u0644\u0627\u0633\u062a\u0631 \u0639\u0645\u0644 \u0645\u06cc\u200c\u06a9\u0646\u062f \u0648 \u0628\u0647 \u06cc\u06a9 Namespace \u0645\u062d\u062f\u0648\u062f \u0646\u06cc\u0633\u062a. \u0627\u06cc\u0646 \u0646\u0648\u0639 Role \u0645\u0639\u0645\u0648\u0644\u0627\u064b \u0628\u0631\u0627\u06cc \u0645\u0646\u0627\u0628\u0639\u06cc \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f \u06a9\u0647 \u0648\u0627\u0628\u0633\u062a\u0647 \u0628\u0647 Namespace \u0646\u06cc\u0633\u062a\u0646\u062f\u061b \u0645\u0627\u0646\u0646\u062f \u0646\u0648\u062f\u0647\u0627 \u06cc\u0627 PersistentVolume\u0647\u0627. \u0647\u0645\u0686\u0646\u06cc\u0646 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646 \u0627\u0632 ClusterRole \u0628\u0631\u0627\u06cc \u062a\u0639\u0631\u06cc\u0641 \u062f\u0633\u062a\u0631\u0633\u06cc\u200c\u0647\u0627\u06cc \u06cc\u06a9\u0633\u0627\u0646 \u062f\u0631 \u0686\u0646\u062f Namespace \u0645\u062e\u062a\u0644\u0641 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f.<\/p>\n\n\n\n<p>\u062f\u0631 \u0639\u0645\u0644\u060c Role \u0648 RoleBinding \u0628\u06cc\u0634\u062a\u0631 \u0628\u0631\u0627\u06cc \u0645\u062f\u06cc\u0631\u06cc\u062a \u062f\u0633\u062a\u0631\u0633\u06cc\u200c\u0647\u0627\u06cc \u0645\u062d\u062f\u0648\u062f \u062f\u0631 \u06cc\u06a9 Namespace \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u0646\u062f\u060c \u062f\u0631\u062d\u0627\u0644\u06cc\u200c\u06a9\u0647 ClusterRole \u0648 ClusterRoleBinding \u0628\u0631\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc\u200c\u0647\u0627\u06cc \u0633\u0631\u0627\u0633\u0631\u06cc \u062f\u0631 \u0633\u0637\u062d \u06a9\u0644\u0627\u0633\u062a\u0631 \u06a9\u0627\u0631\u0628\u0631\u062f \u062f\u0627\u0631\u0646\u062f.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-\u0646\u062d\u0648\u0647-\u0639\u0645\u0644\u06a9\u0631\u062f-rbac-\u062f\u0631-kubernetes\"><a><\/a>\u0646\u062d\u0648\u0647 \u0639\u0645\u0644\u06a9\u0631\u062f RBAC \u062f\u0631 Kubernetes<\/h2>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"741\" src=\"https:\/\/hamravesh.com\/blog\/wp-content\/uploads\/2026\/05\/hamravesh-what-is-kubernetes-rbac02-1024x741.webp\" alt=\"\u0646\u062d\u0648\u0647 \u0639\u0645\u0644\u06a9\u0631\u062f RBAC \u062f\u0631 Kubernetes\" class=\"wp-image-5201\" srcset=\"https:\/\/hamravesh.com\/blog\/wp-content\/uploads\/2026\/05\/hamravesh-what-is-kubernetes-rbac02-1024x741.webp 1024w, https:\/\/hamravesh.com\/blog\/wp-content\/uploads\/2026\/05\/hamravesh-what-is-kubernetes-rbac02-300x217.webp 300w, https:\/\/hamravesh.com\/blog\/wp-content\/uploads\/2026\/05\/hamravesh-what-is-kubernetes-rbac02-768x556.webp 768w, https:\/\/hamravesh.com\/blog\/wp-content\/uploads\/2026\/05\/hamravesh-what-is-kubernetes-rbac02-150x108.webp 150w, https:\/\/hamravesh.com\/blog\/wp-content\/uploads\/2026\/05\/hamravesh-what-is-kubernetes-rbac02-120x87.webp 120w, https:\/\/hamravesh.com\/blog\/wp-content\/uploads\/2026\/05\/hamravesh-what-is-kubernetes-rbac02.webp 1201w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\">\u06cc\u06a9 \u06a9\u0627\u0631\u0628\u0631 \u06cc\u0627 Service Account \u0627\u0632 \u0637\u0631\u06cc\u0642 Role \u06cc\u0627 ClusterRole \u0648 \u0627\u062a\u0635\u0627\u0644 \u0622\u0646 \u0628\u0627 RoleBinding \u06cc\u0627 ClusterRoleBinding\u060c \u0645\u062c\u0648\u0632 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0645\u0646\u0627\u0628\u0639 API \u062f\u0631 \u0633\u0637\u062d Namespace \u06cc\u0627 \u06a9\u0644 \u06a9\u0644\u0627\u0633\u062a\u0631 \u0631\u0627 \u062f\u0631\u06cc\u0627\u0641\u062a \u0645\u06cc\u200c\u06a9\u0646\u062f.<\/figcaption><\/figure>\n\n\n\n<p>\u0633\u06cc\u0633\u062a\u0645 RBAC \u062f\u0631 \u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632 \u0628\u0631\u0627\u06cc \u0628\u0631\u0631\u0633\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc\u200c\u0647\u0627\u060c \u0647\u0631 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0631\u0627 \u0628\u0647\u200c\u0635\u0648\u0631\u062a \u0645\u0631\u062d\u0644\u0647\u200c\u0628\u0647\u200c\u0645\u0631\u062d\u0644\u0647 \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u0645\u06cc\u200c\u06a9\u0646\u062f. \u0632\u0645\u0627\u0646\u06cc \u06a9\u0647 \u06cc\u06a9 \u06a9\u0627\u0631\u0628\u0631\u060c Service Account \u06cc\u0627 \u0628\u0631\u0646\u0627\u0645\u0647 \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u06cc \u0631\u0627 \u0628\u0647 API Server \u0627\u0631\u0633\u0627\u0644 \u0645\u06cc\u200c\u06a9\u0646\u062f\u060c \u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632 \u0645\u0631\u0627\u062d\u0644 \u0632\u06cc\u0631 \u0631\u0627 \u0628\u0631\u0627\u06cc \u062a\u0635\u0645\u06cc\u0645\u200c\u06af\u06cc\u0631\u06cc \u0637\u06cc \u0645\u06cc\u200c\u06a9\u0646\u062f:<\/p>\n\n\n\n<p><strong>\u06af\u0627\u0645 \u06f1: \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0647\u0648\u06cc\u062a \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u200c\u06a9\u0646\u0646\u062f\u0647<\/strong><\/p>\n\n\n\n<p>\u062f\u0631 \u0627\u0628\u062a\u062f\u0627 \u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632 \u0645\u0634\u062e\u0635 \u0645\u06cc\u200c\u06a9\u0646\u062f \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0627\u0632 \u0637\u0631\u0641 \u0686\u0647 \u0647\u0648\u06cc\u062a\u06cc \u0627\u0631\u0633\u0627\u0644 \u0634\u062f\u0647 \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0647\u0648\u06cc\u062a \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u06cc\u06a9 \u06a9\u0627\u0631\u0628\u0631\u060c \u06af\u0631\u0648\u0647 \u06cc\u0627 Service Account \u0628\u0627\u0634\u062f.<\/p>\n\n\n\n<p id=\"h-\u06af\u0627\u0645-\u06f2-\u0628\u0631\u0631\u0633\u06cc-rol-e\u0647\u0627-\u0648-clusterrole\u0647\u0627\"><strong>\u06af\u0627\u0645 \u06f2: \u0628\u0631\u0631\u0633\u06cc Rol\u200de\u0647\u0627 \u0648 ClusterRole\u0647\u0627<\/strong><\/p>\n\n\n\n<p>\u067e\u0633 \u0627\u0632 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0647\u0648\u06cc\u062a\u060c \u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632 Role\u0647\u0627 \u0648 ClusterRole\u0647\u0627\u06cc \u062a\u0639\u0631\u06cc\u0641\u200c\u0634\u062f\u0647 \u0631\u0627 \u0628\u0631\u0631\u0633\u06cc \u0645\u06cc\u200c\u06a9\u0646\u062f \u062a\u0627 \u0645\u0634\u062e\u0635 \u0634\u0648\u062f \u0686\u0647 \u0645\u062c\u0648\u0632\u0647\u0627\u06cc\u06cc \u0628\u0631\u0627\u06cc \u0622\u0646 \u0647\u0648\u06cc\u062a \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f.<\/p>\n\n\n\n<p><strong>\u06af\u0627\u0645 \u06f3: \u0628\u0631\u0631\u0633\u06cc Binding\u0647\u0627<\/strong><\/p>\n\n\n\n<p>\u062f\u0631 \u0627\u062f\u0627\u0645\u0647\u060c \u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632 \u0628\u0631\u0631\u0633\u06cc \u0645\u06cc\u200c\u06a9\u0646\u062f \u06a9\u0647 \u0622\u06cc\u0627 Role \u06cc\u0627 ClusterRole \u0645\u0648\u0631\u062f\u0646\u0638\u0631 \u0627\u0632 \u0637\u0631\u06cc\u0642 RoleBinding \u06cc\u0627 ClusterRoleBinding \u0628\u0647 \u0622\u0646 \u06a9\u0627\u0631\u0628\u0631 \u06cc\u0627 Service Account \u0645\u062a\u0635\u0644 \u0634\u062f\u0647 \u0627\u0633\u062a \u06cc\u0627 \u062e\u06cc\u0631.<\/p>\n\n\n\n<p><strong>\u06af\u0627\u0645 \u06f4: \u062a\u0637\u0628\u06cc\u0642 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0628\u0627 \u0645\u062c\u0648\u0632\u0647\u0627<\/strong><\/p>\n\n\n\n<p>\u062f\u0631 \u0627\u06cc\u0646 \u0645\u0631\u062d\u0644\u0647\u060c \u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632 \u0646\u0648\u0639 \u0639\u0645\u0644\u06cc\u0627\u062a \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u06cc (\u0645\u0627\u0646\u0646\u062f <code>get<\/code> \u060c<code>list<\/code> \u06cc\u0627 <code>delete<\/code>) \u0648 \u0645\u0646\u0628\u0639 \u0647\u062f\u0641 (\u0645\u0627\u0646\u0646\u062f Pod \u06cc\u0627 Service) \u0631\u0627 \u0628\u0627 \u0642\u0648\u0627\u0646\u06cc\u0646 \u062a\u0639\u0631\u06cc\u0641\u200c\u0634\u062f\u0647 \u062f\u0631 RBAC \u062a\u0637\u0628\u06cc\u0642 \u0645\u06cc\u200c\u062f\u0647\u062f.<\/p>\n\n\n\n<p><strong>\u06af\u0627\u0645 \u06f5: \u0635\u062f\u0648\u0631 \u0646\u062a\u06cc\u062c\u0647 \u0646\u0647\u0627\u06cc\u06cc<\/strong><\/p>\n\n\n\n<p>\u0627\u06af\u0631 \u0645\u062c\u0648\u0632 \u0644\u0627\u0632\u0645 \u0648\u062c\u0648\u062f \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u062f\u060c \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u062a\u0623\u06cc\u06cc\u062f \u0645\u06cc\u200c\u0634\u0648\u062f \u0648 \u06a9\u0627\u0631\u0628\u0631 \u0628\u0647 \u0645\u0646\u0628\u0639 \u0645\u0648\u0631\u062f\u0646\u0638\u0631 \u062f\u0633\u062a\u0631\u0633\u06cc \u067e\u06cc\u062f\u0627 \u0645\u06cc\u200c\u06a9\u0646\u062f. \u062f\u0631 \u063a\u06cc\u0631 \u0627\u06cc\u0646 \u0635\u0648\u0631\u062a\u060c \u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0631\u0627 \u0628\u0627 \u062e\u0637\u0627\u06cc <code>403 Forbidden<\/code> \u0631\u062f \u0645\u06cc\u200c\u06a9\u0646\u062f.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-\u0622\u0645\u0648\u0632\u0634-\u0639\u0645\u0644\u06cc-\u067e\u06cc\u0627\u062f\u0647-\u0633\u0627\u0632\u06cc-rbac-\u062f\u0631-\u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632-\u0628\u0647-\u0647\u0645\u0631\u0627\u0647-\u06a9\u062f\"><a><\/a>\u0622\u0645\u0648\u0632\u0634 \u0639\u0645\u0644\u06cc \u067e\u06cc\u0627\u062f\u0647\u200c\u0633\u0627\u0632\u06cc RBAC \u062f\u0631 \u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632 (\u0628\u0647 \u0647\u0645\u0631\u0627\u0647 \u06a9\u062f)<\/h2>\n\n\n\n<p>\u062f\u0631 \u0627\u06cc\u0646 \u0645\u062b\u0627\u0644\u060c \u06cc\u06a9 Service Account \u0627\u06cc\u062c\u0627\u062f \u0645\u06cc\u200c\u06a9\u0646\u06cc\u0645 \u06a9\u0647 \u0641\u0642\u0637 \u0627\u062c\u0627\u0632\u0647 \u0645\u0634\u0627\u0647\u062f\u0647 Service\u0647\u0627 \u0648 ConfigMap\u0647\u0627 \u0631\u0627 \u062f\u0631 \u06cc\u06a9 Namespace \u0645\u0634\u062e\u0635 \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u062f.<\/p>\n\n\n\n<p id=\"h-\u06af\u0627\u0645-\u06f1-\u0627\u06cc\u062c\u0627\u062f-namespace-\u0648-service-account\"><strong>\u06af\u0627\u0645 \u06f1: \u0627\u06cc\u062c\u0627\u062f Namespace \u0648 Service Account<\/strong><\/p>\n\n\n\n<p>\u0627\u0628\u062a\u062f\u0627 \u06cc\u06a9 Namespace \u0648 \u0633\u067e\u0633 \u06cc\u06a9 Service Account \u0627\u062e\u062a\u0635\u0627\u0635\u06cc \u0627\u06cc\u062c\u0627\u062f \u0645\u06cc\u200c\u06a9\u0646\u06cc\u0645:<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro\" data-code-block-pro-font-family=\"Code-Pro-JetBrains-Mono\" style=\"font-size:clamp(16px, 1rem, 24px);font-family:Code-Pro-JetBrains-Mono,ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,monospace;line-height:clamp(24px, 1.5rem, 36px);--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><span style=\"display:flex;align-items:center;padding:10px 0px 10px 16px;margin-bottom:-2px;width:100%;text-align:left;background-color:#2d333d;color:#9eadbd\">Bash<\/span><span role=\"button\" tabindex=\"0\" style=\"color:#adbac7;display:none\" aria-label=\"Copy\" class=\"code-block-pro-copy-button\"><pre class=\"code-block-pro-copy-button-pre\" aria-hidden=\"true\"><textarea class=\"code-block-pro-copy-button-textarea\" tabindex=\"-1\" aria-hidden=\"true\" readonly>kubectl create namespace random-numbers\nkubectl create sa random-numbers-sa -n random-numbers<\/textarea><\/pre><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width:24px;height:24px\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"2\"><path class=\"with-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2m-6 9l2 2 4-4\"><\/path><path class=\"without-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2\"><\/path><\/svg><\/span><pre class=\"shiki github-dark-dimmed\" style=\"background-color: #22272e\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color: #F69D50\">kubectl<\/span><span style=\"color: #ADBAC7\"> <\/span><span style=\"color: #96D0FF\">create<\/span><span style=\"color: #ADBAC7\"> <\/span><span style=\"color: #96D0FF\">namespace<\/span><span style=\"color: #ADBAC7\"> <\/span><span style=\"color: #96D0FF\">random-numbers<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F69D50\">kubectl<\/span><span style=\"color: #ADBAC7\"> <\/span><span style=\"color: #96D0FF\">create<\/span><span style=\"color: #ADBAC7\"> <\/span><span style=\"color: #96D0FF\">sa<\/span><span style=\"color: #ADBAC7\"> <\/span><span style=\"color: #96D0FF\">random-numbers-sa<\/span><span style=\"color: #ADBAC7\"> <\/span><span style=\"color: #6CB6FF\">-n<\/span><span style=\"color: #ADBAC7\"> <\/span><span style=\"color: #96D0FF\">random-numbers<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n<p><strong>\u06af\u0627\u0645 \u06f2: \u062a\u0639\u0631\u06cc\u0641 Role<\/strong><\/p>\n\n\n\n<p>\u062f\u0631 \u0627\u06cc\u0646 \u0645\u0631\u062d\u0644\u0647\u060c \u06cc\u06a9 Role \u062f\u0631 \u0641\u0627\u06cc\u0644\u06cc \u0628\u0647 \u0646\u0627\u0645 \u0641\u0627\u06cc\u0644 \u0628\u0647 \u0646\u0627\u0645 role.yaml \u0645\u06cc\u200c\u0633\u0627\u0632\u06cc\u0645 \u06a9\u0647 \u0641\u0642\u0637 \u062f\u0633\u062a\u0631\u0633\u06cc <code>get<\/code> \u0648 <code>list<\/code> \u0631\u0627 \u0631\u0648\u06cc Service\u0647\u0627 \u0648 ConfigMap\u0647\u0627 \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u062f.<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro\" data-code-block-pro-font-family=\"Code-Pro-JetBrains-Mono\" style=\"font-size:clamp(16px, 1rem, 24px);font-family:Code-Pro-JetBrains-Mono,ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,monospace;line-height:clamp(24px, 1.5rem, 36px);--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><span style=\"display:flex;align-items:center;padding:10px 0px 10px 16px;margin-bottom:-2px;width:100%;text-align:left;background-color:#2d333d;color:#9eadbd\">YAML<\/span><span role=\"button\" tabindex=\"0\" style=\"color:#adbac7;display:none\" aria-label=\"Copy\" class=\"code-block-pro-copy-button\"><pre class=\"code-block-pro-copy-button-pre\" aria-hidden=\"true\"><textarea class=\"code-block-pro-copy-button-textarea\" tabindex=\"-1\" aria-hidden=\"true\" readonly>apiVersion: rbac.authorization.k8s.io\/v1\nkind: Role\nmetadata:\n  namespace: random-numbers\n  name: client-access-role\nrules:\n- apiGroups: &#91;\"\"&#93;\n  resources:\n    - configmaps\n    - services\n  verbs:\n    - get\n    - list<\/textarea><\/pre><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width:24px;height:24px\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"2\"><path class=\"with-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2m-6 9l2 2 4-4\"><\/path><path class=\"without-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2\"><\/path><\/svg><\/span><pre class=\"shiki github-dark-dimmed\" style=\"background-color: #22272e\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color: #8DDB8C\">apiVersion<\/span><span style=\"color: #ADBAC7\">: <\/span><span style=\"color: #96D0FF\">rbac.authorization.k8s.io\/v1<\/span><\/span>\n<span class=\"line\"><span style=\"color: #8DDB8C\">kind<\/span><span style=\"color: #ADBAC7\">: <\/span><span style=\"color: #96D0FF\">Role<\/span><\/span>\n<span class=\"line\"><span style=\"color: #8DDB8C\">metadata<\/span><span style=\"color: #ADBAC7\">:<\/span><\/span>\n<span class=\"line\"><span style=\"color: #ADBAC7\">  <\/span><span style=\"color: #8DDB8C\">namespace<\/span><span style=\"color: #ADBAC7\">: <\/span><span style=\"color: #96D0FF\">random-numbers<\/span><\/span>\n<span class=\"line\"><span style=\"color: #ADBAC7\">  <\/span><span style=\"color: #8DDB8C\">name<\/span><span style=\"color: #ADBAC7\">: <\/span><span style=\"color: #96D0FF\">client-access-role<\/span><\/span>\n<span class=\"line\"><span style=\"color: #8DDB8C\">rules<\/span><span style=\"color: #ADBAC7\">:<\/span><\/span>\n<span class=\"line\"><span style=\"color: #ADBAC7\">- <\/span><span style=\"color: #8DDB8C\">apiGroups<\/span><span style=\"color: #ADBAC7\">: &#91;<\/span><span style=\"color: #96D0FF\">&quot;&quot;<\/span><span style=\"color: #ADBAC7\">&#93;<\/span><\/span>\n<span class=\"line\"><span style=\"color: #ADBAC7\">  <\/span><span style=\"color: #8DDB8C\">resources<\/span><span style=\"color: #ADBAC7\">:<\/span><\/span>\n<span class=\"line\"><span style=\"color: #ADBAC7\">    - <\/span><span style=\"color: #96D0FF\">configmaps<\/span><\/span>\n<span class=\"line\"><span style=\"color: #ADBAC7\">    - <\/span><span style=\"color: #96D0FF\">services<\/span><\/span>\n<span class=\"line\"><span style=\"color: #ADBAC7\">  <\/span><span style=\"color: #8DDB8C\">verbs<\/span><span style=\"color: #ADBAC7\">:<\/span><\/span>\n<span class=\"line\"><span style=\"color: #ADBAC7\">    - <\/span><span style=\"color: #96D0FF\">get<\/span><\/span>\n<span class=\"line\"><span style=\"color: #ADBAC7\">    - <\/span><span style=\"color: #96D0FF\">list<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n<p>\u0628\u0631\u0627\u06cc \u0627\u0639\u0645\u0627\u0644 \u0627\u06cc\u0646 Role \u0631\u0648\u06cc \u06a9\u0644\u0627\u0633\u062a\u0631\u060c \u062f\u0633\u062a\u0648\u0631 \u0632\u06cc\u0631 \u0631\u0627 \u0627\u062c\u0631\u0627 \u06a9\u0646\u06cc\u062f:<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro\" data-code-block-pro-font-family=\"Code-Pro-JetBrains-Mono\" style=\"font-size:clamp(16px, 1rem, 24px);font-family:Code-Pro-JetBrains-Mono,ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,monospace;line-height:clamp(24px, 1.5rem, 36px);--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><span style=\"display:flex;align-items:center;padding:10px 0px 10px 16px;margin-bottom:-2px;width:100%;text-align:left;background-color:#2d333d;color:#9eadbd\">Bash<\/span><span role=\"button\" tabindex=\"0\" style=\"color:#adbac7;display:none\" aria-label=\"Copy\" class=\"code-block-pro-copy-button\"><pre class=\"code-block-pro-copy-button-pre\" aria-hidden=\"true\"><textarea class=\"code-block-pro-copy-button-textarea\" tabindex=\"-1\" aria-hidden=\"true\" readonly>kubectl apply -f role.yaml<\/textarea><\/pre><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width:24px;height:24px\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"2\"><path class=\"with-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2m-6 9l2 2 4-4\"><\/path><path class=\"without-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2\"><\/path><\/svg><\/span><pre class=\"shiki github-dark-dimmed\" style=\"background-color: #22272e\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color: #F69D50\">kubectl<\/span><span style=\"color: #ADBAC7\"> <\/span><span style=\"color: #96D0FF\">apply<\/span><span style=\"color: #ADBAC7\"> <\/span><span style=\"color: #6CB6FF\">-f<\/span><span style=\"color: #ADBAC7\"> <\/span><span style=\"color: #96D0FF\">role.yaml<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n<p><strong>\u06af\u0627\u0645 \u06f3: \u0627\u06cc\u062c\u0627\u062f RoleBinding<\/strong><\/p>\n\n\n\n<p>\u0627\u06a9\u0646\u0648\u0646 \u0628\u0627\u06cc\u062f Role \u062a\u0639\u0631\u06cc\u0641\u200c\u0634\u062f\u0647 \u0631\u0627 \u0628\u0647 Service Account \u0645\u062a\u0635\u0644 \u06a9\u0646\u06cc\u0645. \u0641\u0627\u06cc\u0644 yaml \u0632\u06cc\u0631 \u0628\u0627 \u0646\u0627\u0645 <code>rolebinding.yaml<\/code> \u0631\u0627 \u0627\u06cc\u062c\u0627\u062f \u06a9\u0646\u06cc\u062f:<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro\" data-code-block-pro-font-family=\"Code-Pro-JetBrains-Mono\" style=\"font-size:clamp(16px, 1rem, 24px);font-family:Code-Pro-JetBrains-Mono,ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,monospace;line-height:clamp(24px, 1.5rem, 36px);--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><span style=\"display:flex;align-items:center;padding:10px 0px 10px 16px;margin-bottom:-2px;width:100%;text-align:left;background-color:#2d333d;color:#9eadbd\">YAML<\/span><span role=\"button\" tabindex=\"0\" style=\"color:#adbac7;display:none\" aria-label=\"Copy\" class=\"code-block-pro-copy-button\"><pre class=\"code-block-pro-copy-button-pre\" aria-hidden=\"true\"><textarea class=\"code-block-pro-copy-button-textarea\" tabindex=\"-1\" aria-hidden=\"true\" readonly>apiVersion: rbac.authorization.k8s.io\/v1\nkind: RoleBinding\nmetadata:\n  name: client-access-role-binding\n  namespace: random-numbers\nsubjects:\n- kind: ServiceAccount\n  name: random-numbers-sa\n  namespace: random-numbers\nroleRef:\n  kind: Role\n  name: client-access-role\n  apiGroup: rbac.authorization.k8s.io<\/textarea><\/pre><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width:24px;height:24px\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"2\"><path class=\"with-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2m-6 9l2 2 4-4\"><\/path><path class=\"without-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2\"><\/path><\/svg><\/span><pre class=\"shiki github-dark-dimmed\" style=\"background-color: #22272e\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color: #8DDB8C\">apiVersion<\/span><span style=\"color: #ADBAC7\">: <\/span><span style=\"color: #96D0FF\">rbac.authorization.k8s.io\/v1<\/span><\/span>\n<span class=\"line\"><span style=\"color: #8DDB8C\">kind<\/span><span style=\"color: #ADBAC7\">: <\/span><span style=\"color: #96D0FF\">RoleBinding<\/span><\/span>\n<span class=\"line\"><span style=\"color: #8DDB8C\">metadata<\/span><span style=\"color: #ADBAC7\">:<\/span><\/span>\n<span class=\"line\"><span style=\"color: #ADBAC7\">  <\/span><span style=\"color: #8DDB8C\">name<\/span><span style=\"color: #ADBAC7\">: <\/span><span style=\"color: #96D0FF\">client-access-role-binding<\/span><\/span>\n<span class=\"line\"><span style=\"color: #ADBAC7\">  <\/span><span style=\"color: #8DDB8C\">namespace<\/span><span style=\"color: #ADBAC7\">: <\/span><span style=\"color: #96D0FF\">random-numbers<\/span><\/span>\n<span class=\"line\"><span style=\"color: #8DDB8C\">subjects<\/span><span style=\"color: #ADBAC7\">:<\/span><\/span>\n<span class=\"line\"><span style=\"color: #ADBAC7\">- <\/span><span style=\"color: #8DDB8C\">kind<\/span><span style=\"color: #ADBAC7\">: <\/span><span style=\"color: #96D0FF\">ServiceAccount<\/span><\/span>\n<span class=\"line\"><span style=\"color: #ADBAC7\">  <\/span><span style=\"color: #8DDB8C\">name<\/span><span style=\"color: #ADBAC7\">: <\/span><span style=\"color: #96D0FF\">random-numbers-sa<\/span><\/span>\n<span class=\"line\"><span style=\"color: #ADBAC7\">  <\/span><span style=\"color: #8DDB8C\">namespace<\/span><span style=\"color: #ADBAC7\">: <\/span><span style=\"color: #96D0FF\">random-numbers<\/span><\/span>\n<span class=\"line\"><span style=\"color: #8DDB8C\">roleRef<\/span><span style=\"color: #ADBAC7\">:<\/span><\/span>\n<span class=\"line\"><span style=\"color: #ADBAC7\">  <\/span><span style=\"color: #8DDB8C\">kind<\/span><span style=\"color: #ADBAC7\">: <\/span><span style=\"color: #96D0FF\">Role<\/span><\/span>\n<span class=\"line\"><span style=\"color: #ADBAC7\">  <\/span><span style=\"color: #8DDB8C\">name<\/span><span style=\"color: #ADBAC7\">: <\/span><span style=\"color: #96D0FF\">client-access-role<\/span><\/span>\n<span class=\"line\"><span style=\"color: #ADBAC7\">  <\/span><span style=\"color: #8DDB8C\">apiGroup<\/span><span style=\"color: #ADBAC7\">: <\/span><span style=\"color: #96D0FF\">rbac.authorization.k8s.io<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n<p>\u0628\u0631\u0627\u06cc \u0627\u0639\u0645\u0627\u0644 RoleBinding \u062f\u0633\u062a\u0648\u0631 \u0632\u06cc\u0631 \u0631\u0627 \u0627\u062c\u0631\u0627 \u06a9\u0646\u06cc\u062f:<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro\" data-code-block-pro-font-family=\"Code-Pro-JetBrains-Mono\" style=\"font-size:clamp(16px, 1rem, 24px);font-family:Code-Pro-JetBrains-Mono,ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,monospace;line-height:clamp(24px, 1.5rem, 36px);--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><span style=\"display:flex;align-items:center;padding:10px 0px 10px 16px;margin-bottom:-2px;width:100%;text-align:left;background-color:#2d333d;color:#9eadbd\">Bash<\/span><span role=\"button\" tabindex=\"0\" style=\"color:#adbac7;display:none\" aria-label=\"Copy\" class=\"code-block-pro-copy-button\"><pre class=\"code-block-pro-copy-button-pre\" aria-hidden=\"true\"><textarea class=\"code-block-pro-copy-button-textarea\" tabindex=\"-1\" aria-hidden=\"true\" readonly>kubectl apply -f rolebinding.yaml<\/textarea><\/pre><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width:24px;height:24px\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"2\"><path class=\"with-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2m-6 9l2 2 4-4\"><\/path><path class=\"without-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2\"><\/path><\/svg><\/span><pre class=\"shiki github-dark-dimmed\" style=\"background-color: #22272e\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color: #F69D50\">kubectl<\/span><span style=\"color: #ADBAC7\"> <\/span><span style=\"color: #96D0FF\">apply<\/span><span style=\"color: #ADBAC7\"> <\/span><span style=\"color: #6CB6FF\">-f<\/span><span style=\"color: #ADBAC7\"> <\/span><span style=\"color: #96D0FF\">rolebinding.yaml<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n<p id=\"h-\u06af\u0627\u0645-\u06f4-\u0631\u0627\u0647-\u0627\u0646\u062f\u0627\u0632\u06cc-\u067e\u0627\u062f-\u062a\u0633\u062a-\u0628\u0627-\u0633\u0631\u0648\u06cc\u0633-\u0627\u06a9\u0627\u0646\u062a-\u0627\u062e\u062a\u0635\u0627\u0635\u06cc\"><strong>\u06af\u0627\u0645 \u06f4: \u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u067e\u0627\u062f \u062a\u0633\u062a \u0628\u0627 \u0633\u0631\u0648\u06cc\u0633\u200c\u0627\u06a9\u0627\u0646\u062a \u0627\u062e\u062a\u0635\u0627\u0635\u06cc<\/strong><\/p>\n\n\n\n<p>\u062f\u0631 \u0627\u062f\u0627\u0645\u0647 \u06cc\u06a9 \u067e\u0627\u062f \u0645\u06cc\u200c\u0633\u0627\u0632\u06cc\u0645 \u062a\u0627 \u0628\u062a\u0648\u0627\u0646\u06cc\u0645 \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0631\u0627 \u0627\u0632 \u062f\u0627\u062e\u0644 \u06a9\u0644\u0627\u0633\u062a\u0631 \u062a\u0633\u062a \u06a9\u0646\u06cc\u0645. \u0628\u0631\u0627\u06cc \u0627\u0646\u062c\u0627\u0645 \u0627\u06cc\u0646 \u06a9\u0627\u0631 \u0641\u0627\u06cc\u0644\u06cc \u0628\u0647 \u0646\u0627\u0645 pod-test.yaml \u0628\u0633\u0627\u0632\u06cc\u062f \u0648 \u06a9\u062f \u0632\u06cc\u0631 \u0631\u0627 \u062f\u0631 \u0622\u0646 \u0642\u0631\u0627\u0631 \u062f\u0647\u06cc\u062f:<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro\" data-code-block-pro-font-family=\"Code-Pro-JetBrains-Mono\" style=\"font-size:clamp(16px, 1rem, 24px);font-family:Code-Pro-JetBrains-Mono,ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,monospace;line-height:clamp(24px, 1.5rem, 36px);--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><span style=\"display:flex;align-items:center;padding:10px 0px 10px 16px;margin-bottom:-2px;width:100%;text-align:left;background-color:#2d333d;color:#9eadbd\">YAML<\/span><span role=\"button\" tabindex=\"0\" style=\"color:#adbac7;display:none\" aria-label=\"Copy\" class=\"code-block-pro-copy-button\"><pre class=\"code-block-pro-copy-button-pre\" aria-hidden=\"true\"><textarea class=\"code-block-pro-copy-button-textarea\" tabindex=\"-1\" aria-hidden=\"true\" readonly>apiVersion: v1\nkind: Pod\nmetadata:\n  name: curlo\n  namespace: random-numbers\nspec:\n  serviceAccountName: random-numbers-sa\n  containers:\n  - name: curlo\n    image: curlimages\/curl\n    command: &#91;\"sleep\",\"999999\"&#93;<\/textarea><\/pre><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width:24px;height:24px\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"2\"><path class=\"with-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2m-6 9l2 2 4-4\"><\/path><path class=\"without-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2\"><\/path><\/svg><\/span><pre class=\"shiki github-dark-dimmed\" style=\"background-color: #22272e\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color: #8DDB8C\">apiVersion<\/span><span style=\"color: #ADBAC7\">: <\/span><span style=\"color: #96D0FF\">v1<\/span><\/span>\n<span class=\"line\"><span style=\"color: #8DDB8C\">kind<\/span><span style=\"color: #ADBAC7\">: <\/span><span style=\"color: #96D0FF\">Pod<\/span><\/span>\n<span class=\"line\"><span style=\"color: #8DDB8C\">metadata<\/span><span style=\"color: #ADBAC7\">:<\/span><\/span>\n<span class=\"line\"><span style=\"color: #ADBAC7\">  <\/span><span style=\"color: #8DDB8C\">name<\/span><span style=\"color: #ADBAC7\">: <\/span><span style=\"color: #96D0FF\">curlo<\/span><\/span>\n<span class=\"line\"><span style=\"color: #ADBAC7\">  <\/span><span style=\"color: #8DDB8C\">namespace<\/span><span style=\"color: #ADBAC7\">: <\/span><span style=\"color: #96D0FF\">random-numbers<\/span><\/span>\n<span class=\"line\"><span style=\"color: #8DDB8C\">spec<\/span><span style=\"color: #ADBAC7\">:<\/span><\/span>\n<span class=\"line\"><span style=\"color: #ADBAC7\">  <\/span><span style=\"color: #8DDB8C\">serviceAccountName<\/span><span style=\"color: #ADBAC7\">: <\/span><span style=\"color: #96D0FF\">random-numbers-sa<\/span><\/span>\n<span class=\"line\"><span style=\"color: #ADBAC7\">  <\/span><span style=\"color: #8DDB8C\">containers<\/span><span style=\"color: #ADBAC7\">:<\/span><\/span>\n<span class=\"line\"><span style=\"color: #ADBAC7\">  - <\/span><span style=\"color: #8DDB8C\">name<\/span><span style=\"color: #ADBAC7\">: <\/span><span style=\"color: #96D0FF\">curlo<\/span><\/span>\n<span class=\"line\"><span style=\"color: #ADBAC7\">    <\/span><span style=\"color: #8DDB8C\">image<\/span><span style=\"color: #ADBAC7\">: <\/span><span style=\"color: #96D0FF\">curlimages\/curl<\/span><\/span>\n<span class=\"line\"><span style=\"color: #ADBAC7\">    <\/span><span style=\"color: #8DDB8C\">command<\/span><span style=\"color: #ADBAC7\">: &#91;<\/span><span style=\"color: #96D0FF\">&quot;sleep&quot;<\/span><span style=\"color: #ADBAC7\">,<\/span><span style=\"color: #96D0FF\">&quot;999999&quot;<\/span><span style=\"color: #ADBAC7\">&#93;<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n<p>\u067e\u0627\u062f \u0631\u0627 \u0627\u062c\u0631\u0627 \u06a9\u0646\u06cc\u062f:<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro\" data-code-block-pro-font-family=\"Code-Pro-JetBrains-Mono\" style=\"font-size:clamp(16px, 1rem, 24px);font-family:Code-Pro-JetBrains-Mono,ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,monospace;line-height:clamp(24px, 1.5rem, 36px);--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><span style=\"display:flex;align-items:center;padding:10px 0px 10px 16px;margin-bottom:-2px;width:100%;text-align:left;background-color:#2d333d;color:#9eadbd\">Bash<\/span><span role=\"button\" tabindex=\"0\" style=\"color:#adbac7;display:none\" aria-label=\"Copy\" class=\"code-block-pro-copy-button\"><pre class=\"code-block-pro-copy-button-pre\" aria-hidden=\"true\"><textarea class=\"code-block-pro-copy-button-textarea\" tabindex=\"-1\" aria-hidden=\"true\" readonly>kubectl apply -f pod-test.yaml<\/textarea><\/pre><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width:24px;height:24px\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"2\"><path class=\"with-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2m-6 9l2 2 4-4\"><\/path><path class=\"without-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2\"><\/path><\/svg><\/span><pre class=\"shiki github-dark-dimmed\" style=\"background-color: #22272e\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color: #F69D50\">kubectl<\/span><span style=\"color: #ADBAC7\"> <\/span><span style=\"color: #96D0FF\">apply<\/span><span style=\"color: #ADBAC7\"> <\/span><span style=\"color: #6CB6FF\">-f<\/span><span style=\"color: #ADBAC7\"> <\/span><span style=\"color: #96D0FF\">pod-test.yaml<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n<p><strong>\u06af\u0627\u0645 \u06f5: \u0628\u0631\u0631\u0633\u06cc \u0633\u0637\u062d \u062f\u0633\u062a\u0631\u0633\u06cc<\/strong><\/p>\n\n\n\n<p>\u0627\u0628\u062a\u062f\u0627 \u0648\u0627\u0631\u062f Pod \u0634\u0648\u06cc\u062f:<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro\" data-code-block-pro-font-family=\"Code-Pro-JetBrains-Mono\" style=\"font-size:clamp(16px, 1rem, 24px);font-family:Code-Pro-JetBrains-Mono,ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,monospace;line-height:clamp(24px, 1.5rem, 36px);--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><span style=\"display:flex;align-items:center;padding:10px 0px 10px 16px;margin-bottom:-2px;width:100%;text-align:left;background-color:#2d333d;color:#9eadbd\">Bash<\/span><span role=\"button\" tabindex=\"0\" style=\"color:#adbac7;display:none\" aria-label=\"Copy\" class=\"code-block-pro-copy-button\"><pre class=\"code-block-pro-copy-button-pre\" aria-hidden=\"true\"><textarea class=\"code-block-pro-copy-button-textarea\" tabindex=\"-1\" aria-hidden=\"true\" readonly>kubectl exec -it curlo -n random-numbers -- \/bin\/sh<\/textarea><\/pre><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width:24px;height:24px\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"2\"><path class=\"with-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2m-6 9l2 2 4-4\"><\/path><path class=\"without-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2\"><\/path><\/svg><\/span><pre class=\"shiki github-dark-dimmed\" style=\"background-color: #22272e\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color: #F69D50\">kubectl<\/span><span style=\"color: #ADBAC7\"> <\/span><span style=\"color: #96D0FF\">exec<\/span><span style=\"color: #ADBAC7\"> <\/span><span style=\"color: #6CB6FF\">-it<\/span><span style=\"color: #ADBAC7\"> <\/span><span style=\"color: #96D0FF\">curlo<\/span><span style=\"color: #ADBAC7\"> <\/span><span style=\"color: #6CB6FF\">-n<\/span><span style=\"color: #ADBAC7\"> <\/span><span style=\"color: #96D0FF\">random-numbers<\/span><span style=\"color: #ADBAC7\"> <\/span><span style=\"color: #6CB6FF\">--<\/span><span style=\"color: #ADBAC7\"> <\/span><span style=\"color: #96D0FF\">\/bin\/sh<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n<p>\u0633\u067e\u0633 \u062a\u0648\u06a9\u0646 Service Account \u0631\u0627 \u0628\u0631\u0627\u06cc \u0627\u0631\u0633\u0627\u0644 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0628\u0647 API Server \u062a\u0646\u0638\u06cc\u0645 \u06a9\u0646\u06cc\u062f:<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro\" data-code-block-pro-font-family=\"Code-Pro-JetBrains-Mono\" style=\"font-size:clamp(16px, 1rem, 24px);font-family:Code-Pro-JetBrains-Mono,ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,monospace;line-height:clamp(24px, 1.5rem, 36px);--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><span style=\"display:flex;align-items:center;padding:10px 0px 10px 16px;margin-bottom:-2px;width:100%;text-align:left;background-color:#2d333d;color:#9eadbd\">Bash<\/span><span role=\"button\" tabindex=\"0\" style=\"color:#adbac7;display:none\" aria-label=\"Copy\" class=\"code-block-pro-copy-button\"><pre class=\"code-block-pro-copy-button-pre\" aria-hidden=\"true\"><textarea class=\"code-block-pro-copy-button-textarea\" tabindex=\"-1\" aria-hidden=\"true\" readonly>export TOKEN=$(cat \/var\/run\/secrets\/kubernetes.io\/serviceaccount\/token)\nexport CURL_CA_BUNDLE=\/var\/run\/secrets\/kubernetes.io\/serviceaccount\/ca.crt<\/textarea><\/pre><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width:24px;height:24px\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"2\"><path class=\"with-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2m-6 9l2 2 4-4\"><\/path><path class=\"without-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2\"><\/path><\/svg><\/span><pre class=\"shiki github-dark-dimmed\" style=\"background-color: #22272e\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color: #F47067\">export<\/span><span style=\"color: #ADBAC7\"> TOKEN<\/span><span style=\"color: #F47067\">=<\/span><span style=\"color: #96D0FF\">$(<\/span><span style=\"color: #F69D50\">cat<\/span><span style=\"color: #96D0FF\"> \/var\/run\/secrets\/kubernetes.io\/serviceaccount\/token)<\/span><\/span>\n<span class=\"line\"><span style=\"color: #F47067\">export<\/span><span style=\"color: #ADBAC7\"> CURL_CA_BUNDLE<\/span><span style=\"color: #F47067\">=<\/span><span style=\"color: #96D0FF\">\/var\/run\/secrets\/kubernetes.io\/serviceaccount\/ca.crt<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n<p id=\"h-\u0622\u0632\u0645\u0627\u06cc\u0634-\u0627\u0648\u0644-\u0628\u0631\u0631\u0633\u06cc-\u062f\u0633\u062a\u0631\u0633\u06cc-\u0645\u062c\u0627\u0632-\u0645\u0634\u0627\u0647\u062f\u0647-\u0633\u0631\u0648\u06cc\u0633-\u0647\u0627\"><strong>\u0622\u0632\u0645\u0627\u06cc\u0634 \u0627\u0648\u0644: \u0628\u0631\u0631\u0633\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u062c\u0627\u0632 (\u0645\u0634\u0627\u0647\u062f\u0647 \u0633\u0631\u0648\u06cc\u0633\u200c\u0647\u0627)<\/strong><\/p>\n\n\n\n<p>\u06cc\u06a9 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0628\u0647 \u0622\u062f\u0631\u0633 API \u0633\u0631\u0648\u06cc\u0633\u200c\u0647\u0627\u06cc \u0627\u06cc\u0646 Namespace \u0645\u06cc\u200c\u0641\u0631\u0633\u062a\u06cc\u0645:<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro\" data-code-block-pro-font-family=\"Code-Pro-JetBrains-Mono\" style=\"font-size:clamp(16px, 1rem, 24px);font-family:Code-Pro-JetBrains-Mono,ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,monospace;line-height:clamp(24px, 1.5rem, 36px);--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><span style=\"display:flex;align-items:center;padding:10px 0px 10px 16px;margin-bottom:-2px;width:100%;text-align:left;background-color:#2d333d;color:#9eadbd\">Bash<\/span><span role=\"button\" tabindex=\"0\" style=\"color:#adbac7;display:none\" aria-label=\"Copy\" class=\"code-block-pro-copy-button\"><pre class=\"code-block-pro-copy-button-pre\" aria-hidden=\"true\"><textarea class=\"code-block-pro-copy-button-textarea\" tabindex=\"-1\" aria-hidden=\"true\" readonly>curl -k --header \"Authorization: Bearer $TOKEN\" \\\nhttps:\/\/kubernetes.default.svc\/api\/v1\/namespaces\/random-numbers\/services<\/textarea><\/pre><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width:24px;height:24px\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"2\"><path class=\"with-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2m-6 9l2 2 4-4\"><\/path><path class=\"without-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2\"><\/path><\/svg><\/span><pre class=\"shiki github-dark-dimmed\" style=\"background-color: #22272e\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color: #F69D50\">curl<\/span><span style=\"color: #ADBAC7\"> <\/span><span style=\"color: #6CB6FF\">-k<\/span><span style=\"color: #ADBAC7\"> <\/span><span style=\"color: #6CB6FF\">--header<\/span><span style=\"color: #ADBAC7\"> <\/span><span style=\"color: #96D0FF\">&quot;Authorization: Bearer <\/span><span style=\"color: #ADBAC7\">$TOKEN<\/span><span style=\"color: #96D0FF\">&quot;<\/span><span style=\"color: #ADBAC7\"> <\/span><span style=\"color: #F47067\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #ADBAC7\">https:\/\/kubernetes.default.svc\/api\/v1\/namespaces\/random-numbers\/services<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n<p>\u062f\u0631 \u0635\u0648\u0631\u062a \u0645\u0648\u0641\u0642\u06cc\u062a\u060c Kubernetes \u0627\u0637\u0644\u0627\u0639\u0627\u062a Service\u0647\u0627 \u0631\u0627 \u0628\u0627 \u067e\u0627\u0633\u062e <code>200 OK<\/code> \u0628\u0631\u0645\u06cc\u200c\u06af\u0631\u062f\u0627\u0646\u062f.<\/p>\n\n\n\n<p id=\"h-\u0622\u0632\u0645\u0627\u06cc\u0634-\u062f\u0648\u0645-\u0628\u0631\u0631\u0633\u06cc-\u062f\u0633\u062a\u0631\u0633\u06cc-\u063a\u06cc\u0631\u0645\u062c\u0627\u0632\"><strong>\u0622\u0632\u0645\u0627\u06cc\u0634 \u062f\u0648\u0645: \u0628\u0631\u0631\u0633\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u063a\u06cc\u0631\u0645\u062c\u0627\u0632<\/strong><\/p>\n\n\n\n<p>\u0627\u06a9\u0646\u0648\u0646 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0645\u0634\u0627\u0647\u062f\u0647 Pod\u0647\u0627 \u0631\u0627 \u0627\u0631\u0633\u0627\u0644 \u0645\u06cc\u200c\u06a9\u0646\u06cc\u0645:<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro\" data-code-block-pro-font-family=\"Code-Pro-JetBrains-Mono\" style=\"font-size:clamp(16px, 1rem, 24px);font-family:Code-Pro-JetBrains-Mono,ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,monospace;line-height:clamp(24px, 1.5rem, 36px);--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><span style=\"display:flex;align-items:center;padding:10px 0px 10px 16px;margin-bottom:-2px;width:100%;text-align:left;background-color:#2d333d;color:#9eadbd\">Bash<\/span><span role=\"button\" tabindex=\"0\" style=\"color:#adbac7;display:none\" aria-label=\"Copy\" class=\"code-block-pro-copy-button\"><pre class=\"code-block-pro-copy-button-pre\" aria-hidden=\"true\"><textarea class=\"code-block-pro-copy-button-textarea\" tabindex=\"-1\" aria-hidden=\"true\" readonly>curl -k --header \"Authorization: Bearer $TOKEN\" \\\nhttps:\/\/kubernetes.default.svc\/api\/v1\/namespaces\/random-numbers\/pods<\/textarea><\/pre><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width:24px;height:24px\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"2\"><path class=\"with-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2m-6 9l2 2 4-4\"><\/path><path class=\"without-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2\"><\/path><\/svg><\/span><pre class=\"shiki github-dark-dimmed\" style=\"background-color: #22272e\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color: #F69D50\">curl<\/span><span style=\"color: #ADBAC7\"> <\/span><span style=\"color: #6CB6FF\">-k<\/span><span style=\"color: #ADBAC7\"> <\/span><span style=\"color: #6CB6FF\">--header<\/span><span style=\"color: #ADBAC7\"> <\/span><span style=\"color: #96D0FF\">&quot;Authorization: Bearer <\/span><span style=\"color: #ADBAC7\">$TOKEN<\/span><span style=\"color: #96D0FF\">&quot;<\/span><span style=\"color: #ADBAC7\"> <\/span><span style=\"color: #F47067\">\\<\/span><\/span>\n<span class=\"line\"><span style=\"color: #ADBAC7\">https:\/\/kubernetes.default.svc\/api\/v1\/namespaces\/random-numbers\/pods<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n<p>\u0686\u0648\u0646 \u062f\u0631 Role \u062a\u0639\u0631\u06cc\u0641\u200c\u0634\u062f\u0647 \u0645\u062c\u0648\u0632 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 Pod\u0647\u0627 \u0648\u062c\u0648\u062f \u0646\u062f\u0627\u0631\u062f\u060c Kubernetes \u067e\u0627\u0633\u062e <code>403 Forbidden<\/code> \u0631\u0627 \u0628\u0631\u0645\u06cc\u200c\u06af\u0631\u062f\u0627\u0646\u062f:<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro\" data-code-block-pro-font-family=\"Code-Pro-JetBrains-Mono\" style=\"font-size:clamp(16px, 1rem, 24px);font-family:Code-Pro-JetBrains-Mono,ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,monospace;line-height:clamp(24px, 1.5rem, 36px);--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><span style=\"display:flex;align-items:center;padding:10px 0px 10px 16px;margin-bottom:-2px;width:100%;text-align:left;background-color:#2d333d;color:#9eadbd\">JSON<\/span><span role=\"button\" tabindex=\"0\" style=\"color:#adbac7;display:none\" aria-label=\"Copy\" class=\"code-block-pro-copy-button\"><pre class=\"code-block-pro-copy-button-pre\" aria-hidden=\"true\"><textarea class=\"code-block-pro-copy-button-textarea\" tabindex=\"-1\" aria-hidden=\"true\" readonly>{\n  \"status\": \"Failure\",\n  \"message\": \"pods is forbidden: User \\\"system:serviceaccount:random-numbers:random-numbers-sa\\\" cannot list resource \\\"pods\\\" in the namespace \\\"random-numbers\\\"\",\n  \"reason\": \"Forbidden\",\n  \"code\": 403\n}<\/textarea><\/pre><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width:24px;height:24px\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"2\"><path class=\"with-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2m-6 9l2 2 4-4\"><\/path><path class=\"without-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2\"><\/path><\/svg><\/span><pre class=\"shiki github-dark-dimmed\" style=\"background-color: #22272e\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color: #ADBAC7\">{<\/span><\/span>\n<span class=\"line\"><span style=\"color: #ADBAC7\">  <\/span><span style=\"color: #8DDB8C\">&quot;status&quot;<\/span><span style=\"color: #ADBAC7\">: <\/span><span style=\"color: #96D0FF\">&quot;Failure&quot;<\/span><span style=\"color: #ADBAC7\">,<\/span><\/span>\n<span class=\"line\"><span style=\"color: #ADBAC7\">  <\/span><span style=\"color: #8DDB8C\">&quot;message&quot;<\/span><span style=\"color: #ADBAC7\">: <\/span><span style=\"color: #96D0FF\">&quot;pods is forbidden: User <\/span><span style=\"color: #F47067\">\\&quot;<\/span><span style=\"color: #96D0FF\">system:serviceaccount:random-numbers:random-numbers-sa<\/span><span style=\"color: #F47067\">\\&quot;<\/span><span style=\"color: #96D0FF\"> cannot list resource <\/span><span style=\"color: #F47067\">\\&quot;<\/span><span style=\"color: #96D0FF\">pods<\/span><span style=\"color: #F47067\">\\&quot;<\/span><span style=\"color: #96D0FF\"> in the namespace <\/span><span style=\"color: #F47067\">\\&quot;<\/span><span style=\"color: #96D0FF\">random-numbers<\/span><span style=\"color: #F47067\">\\&quot;<\/span><span style=\"color: #96D0FF\">&quot;<\/span><span style=\"color: #ADBAC7\">,<\/span><\/span>\n<span class=\"line\"><span style=\"color: #ADBAC7\">  <\/span><span style=\"color: #8DDB8C\">&quot;reason&quot;<\/span><span style=\"color: #ADBAC7\">: <\/span><span style=\"color: #96D0FF\">&quot;Forbidden&quot;<\/span><span style=\"color: #ADBAC7\">,<\/span><\/span>\n<span class=\"line\"><span style=\"color: #ADBAC7\">  <\/span><span style=\"color: #8DDB8C\">&quot;code&quot;<\/span><span style=\"color: #ADBAC7\">: <\/span><span style=\"color: #6CB6FF\">403<\/span><\/span>\n<span class=\"line\"><span style=\"color: #ADBAC7\">}<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-\u0628\u0647\u062a\u0631\u06cc\u0646-\u0631\u0648\u0634-\u0647\u0627-best-practices-\u0628\u0631\u0627\u06cc-\u067e\u06cc\u0627\u062f\u0647-\u0633\u0627\u0632\u06cc-rbac\"><a><\/a>\u0628\u0647\u062a\u0631\u06cc\u0646 \u0631\u0648\u0634\u200c\u0647\u0627 (Best Practices) \u0628\u0631\u0627\u06cc \u067e\u06cc\u0627\u062f\u0647\u200c\u0633\u0627\u0632\u06cc RBAC<\/h2>\n\n\n\n<p>\u067e\u06cc\u0627\u062f\u0647\u200c\u0633\u0627\u0632\u06cc \u0635\u062d\u06cc\u062d RBAC \u062f\u0631 \u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632 \u0646\u0642\u0634 \u0645\u0647\u0645\u06cc \u062f\u0631 \u06a9\u0627\u0647\u0634 \u0631\u06cc\u0633\u06a9\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0648 \u06a9\u0646\u062a\u0631\u0644 \u062f\u0633\u062a\u0631\u0633\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062f\u0627\u0631\u062f. \u0645\u0647\u0645\u200c\u062a\u0631\u06cc\u0646 \u0631\u0627\u0647\u06a9\u0627\u0631\u0647\u0627\u06cc \u0627\u06cc\u0646 \u062d\u0648\u0632\u0647 \u0639\u0628\u0627\u0631\u062a\u200c\u0627\u0646\u062f \u0627\u0632:<\/p>\n\n\n\n<p><strong>\u0627\u0635\u0644 \u062d\u062f\u0627\u0642\u0644 \u062f\u0633\u062a\u0631\u0633\u06cc (Least Privilege)<\/strong><\/p>\n\n\n\n<p>\u062f\u0633\u062a\u0631\u0633\u06cc\u200c\u0647\u0627 \u0628\u0627\u06cc\u062f \u0641\u0642\u0637 \u0628\u0631 \u0627\u0633\u0627\u0633 \u0646\u06cc\u0627\u0632 \u0648\u0627\u0642\u0639\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0648 \u0633\u0631\u0648\u06cc\u0633\u200c\u0647\u0627 \u062a\u0639\u0631\u06cc\u0641 \u0634\u0648\u0646\u062f. \u0628\u0647\u062a\u0631 \u0627\u0633\u062a \u0627\u0632 \u0627\u0639\u0637\u0627\u06cc \u0645\u062c\u0648\u0632\u0647\u0627\u06cc \u06af\u0633\u062a\u0631\u062f\u0647 \u06cc\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0648\u0627\u06cc\u0644\u062f\u06a9\u0627\u0631\u062f <code>*<\/code> \u062f\u0631 \u0628\u062e\u0634 \u0645\u0646\u0627\u0628\u0639 \u0648 \u0639\u0645\u0644\u06cc\u0627\u062a\u200c\u0647\u0627 \u062e\u0648\u062f\u062f\u0627\u0631\u06cc \u0634\u0648\u062f.<\/p>\n\n\n\n<p><strong>\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 Role \u0648 RoleBinding \u062f\u0631 \u0633\u0637\u062d Namespace<\/strong><\/p>\n\n\n\n<p>\u062f\u0631 \u0628\u06cc\u0634\u062a\u0631 \u0633\u0646\u0627\u0631\u06cc\u0648\u0647\u0627\u060c \u0628\u0647\u062a\u0631 \u0627\u0633\u062a \u062f\u0633\u062a\u0631\u0633\u06cc\u200c\u0647\u0627 \u062f\u0631 \u0633\u0637\u062d Namespace \u0645\u062f\u06cc\u0631\u06cc\u062a \u0634\u0648\u0646\u062f. \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 Role \u0648 RoleBinding \u0628\u0627\u0639\u062b \u0645\u06cc\u200c\u0634\u0648\u062f \u062f\u0627\u0645\u0646\u0647 \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u062d\u062f\u0648\u062f \u0628\u0645\u0627\u0646\u062f \u0648 \u0627\u06cc\u0632\u0648\u0644\u0647\u200c\u0633\u0627\u0632\u06cc \u0628\u06cc\u0646 \u0645\u062d\u06cc\u0637\u200c\u0647\u0627\u06cc\u06cc \u0645\u0627\u0646\u0646\u062f <code>dev<\/code> \u0648 <code>prod<\/code> \u062d\u0641\u0638 \u0634\u0648\u062f.<\/p>\n\n\n\n<p><strong>\u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 ClusterRole \u0648 ClusterRoleBinding<\/strong><\/p>\n\n\n\n<p>ClusterRole \u0648 ClusterRoleBinding \u0641\u0642\u0637 \u0628\u0627\u06cc\u062f \u0628\u0631\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc\u200c\u0647\u0627\u06cc \u0633\u0631\u0627\u0633\u0631\u06cc \u06cc\u0627 \u0645\u0646\u0627\u0628\u0639 cluster-scoped \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0634\u0648\u0646\u062f. \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u063a\u06cc\u0631\u0636\u0631\u0648\u0631\u06cc \u0627\u0632 \u0622\u0646\u200c\u0647\u0627 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0633\u0637\u062d \u062f\u0633\u062a\u0631\u0633\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0631\u0627 \u0628\u06cc\u0634 \u0627\u0632 \u062d\u062f \u0627\u0641\u0632\u0627\u06cc\u0634 \u062f\u0647\u062f.<\/p>\n\n\n\n<p><strong>\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 Service Account \u0627\u062e\u062a\u0635\u0627\u0635\u06cc<\/strong><\/p>\n\n\n\n<p>\u0628\u0647\u062a\u0631 \u0627\u0633\u062a \u0647\u0631 Pod \u06cc\u0627 \u0628\u0631\u0646\u0627\u0645\u0647 \u0627\u0632 Service Account \u0627\u062e\u062a\u0635\u0627\u0635\u06cc \u062e\u0648\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u062f \u0648 \u0628\u0647 Service Account \u067e\u06cc\u0634\u200c\u0641\u0631\u0636 Namespace \u0648\u0627\u0628\u0633\u062a\u0647 \u0646\u0628\u0627\u0634\u062f. \u0627\u06cc\u0646 \u06a9\u0627\u0631 \u0628\u0627\u0639\u062b \u0645\u06cc\u200c\u0634\u0648\u062f \u062f\u0633\u062a\u0631\u0633\u06cc \u0633\u0631\u0648\u06cc\u0633\u200c\u0647\u0627 \u0627\u0632 \u06cc\u06a9\u062f\u06cc\u06af\u0631 \u062c\u062f\u0627 \u0634\u0648\u062f.<\/p>\n\n\n\n<p>\u0647\u0645\u0686\u0646\u06cc\u0646 \u062f\u0631 \u0635\u0648\u0631\u062a \u0639\u062f\u0645 \u0646\u06cc\u0627\u0632\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646 \u0642\u0627\u0628\u0644\u06cc\u062a mount \u062e\u0648\u062f\u06a9\u0627\u0631 \u062a\u0648\u06a9\u0646 Service Account \u0631\u0627 \u0628\u0627 \u062a\u0646\u0638\u06cc\u0645 <code>automountServiceAccountToken: false<\/code> \u063a\u06cc\u0631\u0641\u0639\u0627\u0644 \u06a9\u0631\u062f.<\/p>\n\n\n\n<p><strong>\u0628\u0627\u0632\u0628\u06cc\u0646\u06cc \u0648 \u062d\u0633\u0627\u0628\u200c\u0631\u0633\u06cc \u062f\u0648\u0631\u0647\u200c\u0627\u06cc<\/strong><\/p>\n\n\n\n<p>\u062a\u0646\u0638\u06cc\u0645\u0627\u062a RBAC \u0628\u0627\u06cc\u062f \u0628\u0647\u200c\u0635\u0648\u0631\u062a \u062f\u0648\u0631\u0647\u200c\u0627\u06cc \u0628\u0631\u0631\u0633\u06cc \u0634\u0648\u0646\u062f \u062a\u0627 \u062f\u0633\u062a\u0631\u0633\u06cc\u200c\u0647\u0627\u06cc \u0642\u062f\u06cc\u0645\u06cc\u060c RoleBinding\u0647\u0627\u06cc \u0628\u0644\u0627\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06cc\u0627 \u0645\u062c\u0648\u0632\u0647\u0627\u06cc \u063a\u06cc\u0631\u0636\u0631\u0648\u0631\u06cc \u062d\u0630\u0641 \u0634\u0648\u0646\u062f. \u0647\u0645\u0686\u0646\u06cc\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc\u200c\u0647\u0627\u06cc \u062d\u0633\u0627\u0633\u060c \u0628\u0647\u200c\u0648\u06cc\u0698\u0647 \u0627\u0639\u0636\u0627\u06cc \u06af\u0631\u0648\u0647 <code>system:masters<\/code>\u060c \u0628\u0627\u06cc\u062f \u0628\u0647\u200c\u0635\u0648\u0631\u062a \u0645\u0633\u062a\u0645\u0631 \u06a9\u0646\u062a\u0631\u0644 \u0634\u0648\u0646\u062f.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-\u0627\u0634\u062a\u0628\u0627\u0647\u0627\u062a-\u0631\u0627\u06cc\u062c-\u062f\u0631-\u0645\u062f\u06cc\u0631\u06cc\u062a-rbac-\u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632\"><a><\/a>\u0627\u0634\u062a\u0628\u0627\u0647\u0627\u062a \u0631\u0627\u06cc\u062c \u062f\u0631 \u0645\u062f\u06cc\u0631\u06cc\u062a RBAC \u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632<\/h2>\n\n\n\n<p>\u062f\u0631 \u067e\u06cc\u0627\u062f\u0647\u200c\u0633\u0627\u0632\u06cc RBAC\u060c \u0628\u0633\u06cc\u0627\u0631\u06cc \u0627\u0632 \u0645\u0634\u06a9\u0644\u0627\u062a \u0627\u0645\u0646\u06cc\u062a\u06cc \u0646\u0647 \u0628\u0647 \u062f\u0644\u06cc\u0644 \u0636\u0639\u0641 \u0627\u0628\u0632\u0627\u0631\u060c \u0628\u0644\u06a9\u0647 \u0628\u0647 \u062e\u0627\u0637\u0631 \u062a\u0646\u0638\u06cc\u0645\u0627\u062a \u0646\u0627\u062f\u0631\u0633\u062a \u0631\u062e \u0645\u06cc\u200c\u062f\u0647\u0646\u062f. \u0645\u0647\u0645\u200c\u062a\u0631\u06cc\u0646 \u0627\u0634\u062a\u0628\u0627\u0647\u0627\u062a \u0631\u0627\u06cc\u062c \u0639\u0628\u0627\u0631\u062a\u200c\u0627\u0646\u062f \u0627\u0632:<\/p>\n\n\n\n<p><strong>\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 ClusterRoleBinding \u0628\u0647\u200c\u062c\u0627\u06cc RoleBinding<\/strong><\/p>\n\n\n\n<p>\u06cc\u06a9\u06cc \u0627\u0632 \u062e\u0637\u0627\u0647\u0627\u06cc \u0631\u0627\u06cc\u062c\u060c \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0628\u06cc\u200c\u062f\u0644\u06cc\u0644 \u0627\u0632 ClusterRoleBinding \u0627\u0633\u062a. \u0627\u06cc\u0646 \u06a9\u0627\u0631 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0627\u0639\u062b \u0634\u0648\u062f \u06a9\u0627\u0631\u0628\u0631\u06cc \u06a9\u0647 \u0628\u0627\u06cc\u062f \u0641\u0642\u0637 \u062f\u0631 \u06cc\u06a9 Namespace \u0645\u062d\u062f\u0648\u062f \u0628\u0627\u0634\u062f\u060c \u0628\u0647 \u0645\u0646\u0627\u0628\u0639 \u0633\u0627\u06cc\u0631 Namespace\u0647\u0627 \u0646\u06cc\u0632 \u062f\u0633\u062a\u0631\u0633\u06cc \u067e\u06cc\u062f\u0627 \u06a9\u0646\u062f.<\/p>\n\n\n\n<p><strong>\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0648\u0627\u06cc\u0644\u062f\u06a9\u0627\u0631\u062f \u062f\u0631 \u062f\u0633\u062a\u0631\u0633\u06cc\u200c\u0647\u0627<\/strong><\/p>\n\n\n\n<p>\u062f\u0627\u062f\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc <code>*<\/code> \u062f\u0631 \u0645\u0646\u0627\u0628\u0639 \u06cc\u0627 \u0639\u0645\u0644\u06cc\u0627\u062a\u200c\u0647\u0627 \u0639\u0645\u0644\u0627\u064b \u062a\u0645\u0627\u0645 \u0645\u062d\u062f\u0648\u062f\u06cc\u062a\u200c\u0647\u0627\u06cc RBAC \u0631\u0627 \u0627\u0632 \u0628\u06cc\u0646 \u0645\u06cc\u200c\u0628\u0631\u062f \u0648 \u0628\u0627\u0639\u062b \u0627\u06cc\u062c\u0627\u062f \u062f\u0633\u062a\u0631\u0633\u06cc\u200c\u0647\u0627\u06cc \u063a\u06cc\u0631\u0642\u0627\u0628\u0644\u200c\u06a9\u0646\u062a\u0631\u0644 \u0645\u06cc\u200c\u0634\u0648\u062f.<\/p>\n\n\n\n<p><strong>\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u062d\u0633\u0627\u0628 cluster-admin \u0628\u0631\u0627\u06cc \u06a9\u0627\u0631\u0647\u0627\u06cc \u0631\u0648\u0632\u0645\u0631\u0647<\/strong><\/p>\n\n\n\n<p>\u062d\u0633\u0627\u0628 cluster-admin \u062f\u0633\u062a\u0631\u0633\u06cc \u06a9\u0627\u0645\u0644 \u0628\u0647 \u06a9\u0644 \u06a9\u0644\u0627\u0633\u062a\u0631 \u062f\u0627\u0631\u062f. \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0631\u0648\u0632\u0645\u0631\u0647 \u0627\u0632 \u0622\u0646 \u0631\u06cc\u0633\u06a9 \u062e\u0637\u0627\u06cc \u0627\u0646\u0633\u0627\u0646\u06cc \u0631\u0627 \u0628\u0647\u200c\u0634\u062f\u062a \u0627\u0641\u0632\u0627\u06cc\u0634 \u0645\u06cc\u200c\u062f\u0647\u062f \u0648 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0645\u0646\u062c\u0631 \u0628\u0647 \u062a\u063a\u06cc\u06cc\u0631\u0627\u062a \u0645\u062e\u0631\u0628 \u062f\u0631 \u06a9\u0644 \u0633\u06cc\u0633\u062a\u0645 \u0634\u0648\u062f.<\/p>\n\n\n\n<p><strong>\u0627\u0636\u0627\u0641\u0647 \u06a9\u0631\u062f\u0646 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0628\u0647 \u06af\u0631\u0648\u0647 system:masters<\/strong><\/p>\n\n\n\n<p>\u0639\u0636\u0648\u06cc\u062a \u062f\u0631 \u0627\u06cc\u0646 \u06af\u0631\u0648\u0647 \u0628\u0627\u0639\u062b \u062f\u0648\u0631 \u0632\u062f\u0646 \u06a9\u0627\u0645\u0644 RBAC \u0645\u06cc\u200c\u0634\u0648\u062f. \u0627\u06cc\u0646 \u0633\u0637\u062d \u062f\u0633\u062a\u0631\u0633\u06cc \u0639\u0645\u0644\u0627\u064b \u0645\u0639\u0627\u062f\u0644 \u062f\u0633\u062a\u0631\u0633\u06cc \u0631\u0648\u062a \u062f\u0631 \u06a9\u0644 \u06a9\u0644\u0627\u0633\u062a\u0631 \u0627\u0633\u062a \u0648 \u0628\u0627\u06cc\u062f \u0628\u0647\u200c\u0634\u062f\u062a \u0645\u062d\u062f\u0648\u062f \u0634\u0648\u062f.<\/p>\n\n\n\n<p><strong>\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 Service Account \u067e\u06cc\u0634\u200c\u0641\u0631\u0636<\/strong><\/p>\n\n\n\n<p>\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 Service Account \u067e\u06cc\u0634\u200c\u0641\u0631\u0636 \u06cc\u06a9 Namespace \u0628\u0631\u0627\u06cc \u0647\u0645\u0647 \u067e\u0627\u062f\u0647\u0627 \u0628\u0627\u0639\u062b \u0645\u06cc\u200c\u0634\u0648\u062f \u0633\u0631\u0648\u06cc\u0633\u200c\u0647\u0627\u06cc \u0645\u062e\u062a\u0644\u0641\u060c \u06cc\u06a9 \u0633\u0637\u062d \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u0634\u062a\u0631\u06a9 \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u0646\u062f. \u0627\u06cc\u0646 \u0645\u0648\u0636\u0648\u0639 \u0631\u06cc\u0633\u06a9 \u0646\u0641\u0648\u0630 \u0631\u0627 \u0627\u0641\u0632\u0627\u06cc\u0634 \u0645\u06cc\u200c\u062f\u0647\u062f.<\/p>\n\n\n\n<p><strong>\u0641\u0639\u0627\u0644\u200c\u0633\u0627\u0632\u06cc \u062a\u0646\u0638\u06cc\u0645\u0627\u062a \u0646\u0627\u0627\u0645\u0646 \u062f\u0631 API Server<\/strong><\/p>\n\n\n\n<p>\u0641\u0639\u0627\u0644 \u06a9\u0631\u062f\u0646 \u06af\u0632\u06cc\u0646\u0647\u200c\u0647\u0627\u06cc\u06cc \u0645\u0627\u0646\u0646\u062f <code>--insecure-port<\/code> \u06cc\u0627 <code>--anonymous-auth<\/code> \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0644\u0627\u06cc\u0647 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0648 \u06a9\u0646\u062a\u0631\u0644 \u062f\u0633\u062a\u0631\u0633\u06cc \u0631\u0627 \u0639\u0645\u0644\u0627\u064b \u0628\u06cc\u200c\u0627\u062b\u0631 \u06a9\u0646\u062f.<\/p>\n\n\n\n<p><strong>\u0639\u062f\u0645 \u0628\u0627\u0632\u0628\u06cc\u0646\u06cc \u062f\u0648\u0631\u0647\u200c\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc\u200c\u0647\u0627<\/strong><\/p>\n\n\n\n<p>\u0627\u06af\u0631 Role\u0647\u0627 \u0648 RoleBinding\u0647\u0627 \u0628\u0647\u200c\u0635\u0648\u0631\u062a \u062f\u0648\u0631\u0647\u200c\u0627\u06cc \u0628\u0631\u0631\u0633\u06cc \u0646\u0634\u0648\u0646\u062f\u060c \u062f\u0633\u062a\u0631\u0633\u06cc\u200c\u0647\u0627\u06cc \u0642\u062f\u06cc\u0645\u06cc \u0648 \u063a\u06cc\u0631\u0636\u0631\u0648\u0631\u06cc \u0628\u0627\u0642\u06cc \u0645\u06cc\u200c\u0645\u0627\u0646\u0646\u062f \u0648 \u0628\u0647 \u0645\u0631\u0648\u0631 \u0632\u0645\u0627\u0646 \u0633\u0637\u062d \u062d\u0645\u0644\u0647 (Attack Surface) \u0631\u0627 \u0627\u0641\u0632\u0627\u06cc\u0634 \u0645\u06cc\u200c\u062f\u0647\u0646\u062f.<\/p>\n\n\n\n<p><strong>\u0646\u0627\u062f\u06cc\u062f\u0647 \u06af\u0631\u0641\u062a\u0646 \u062a\u063a\u06cc\u06cc\u0631\u0627\u062a \u0633\u0627\u0632\u0645\u0627\u0646\u06cc<\/strong><\/p>\n\n\n\n<p>\u062a\u063a\u06cc\u06cc\u0631 \u0646\u0642\u0634 \u0627\u0641\u0631\u0627\u062f \u062f\u0631 \u0633\u0627\u0632\u0645\u0627\u0646 \u06cc\u0627 \u062e\u0631\u0648\u062c \u0622\u0646\u200c\u0647\u0627 \u0628\u0627\u06cc\u062f \u0628\u0644\u0627\u0641\u0627\u0635\u0644\u0647 \u062f\u0631 RBAC \u0627\u0639\u0645\u0627\u0644 \u0634\u0648\u062f. \u0639\u062f\u0645 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc\u200c\u0647\u0627 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0627\u0639\u062b \u0627\u0646\u0628\u0627\u0634\u062a \u0645\u062c\u0648\u0632\u0647\u0627\u06cc \u0627\u0636\u0627\u0641\u06cc \u0634\u0648\u062f.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-\u0645\u062d\u062f\u0648\u062f\u06cc\u062a-\u0647\u0627\u06cc-\u0633\u06cc\u0633\u062a\u0645-rbac-\u062f\u0631-\u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632\">\u0645\u062d\u062f\u0648\u062f\u06cc\u062a\u200c\u0647\u0627\u06cc \u0633\u06cc\u0633\u062a\u0645 RBAC \u062f\u0631 \u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632<\/h2>\n\n\n\n<p>\u0633\u06cc\u0633\u062a\u0645 RBAC \u062f\u0631 \u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632 \u0627\u0628\u0632\u0627\u0631 \u0627\u0635\u0644\u06cc \u06a9\u0646\u062a\u0631\u0644 \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0633\u062a\u060c \u0627\u0645\u0627 \u0628\u0647\u200c\u062a\u0646\u0647\u0627\u06cc\u06cc \u0628\u0631\u0627\u06cc \u067e\u0648\u0634\u0634 \u062a\u0645\u0627\u0645 \u0633\u0646\u0627\u0631\u06cc\u0648\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u06a9\u0627\u0641\u06cc \u0646\u06cc\u0633\u062a \u0648 \u0645\u062d\u062f\u0648\u062f\u06cc\u062a\u200c\u0647\u0627\u06cc \u0645\u0634\u062e\u0635\u06cc \u062f\u0627\u0631\u062f:<\/p>\n\n\n\n<p><strong>\u06f1. \u0639\u062f\u0645 \u06a9\u0646\u062a\u0631\u0644 \u0631\u0648\u06cc \u0645\u062d\u062a\u0648\u0627\u06cc \u0645\u0646\u0627\u0628\u0639<\/strong><\/p>\n\n\n\n<p>RBAC \u0641\u0642\u0637 \u0645\u0634\u062e\u0635 \u0645\u06cc\u200c\u06a9\u0646\u062f \u0686\u0647 \u06a9\u0633\u06cc \u0628\u0647 \u06cc\u06a9 resource \u062f\u0633\u062a\u0631\u0633\u06cc \u062f\u0627\u0631\u062f\u060c \u0627\u0645\u0627 \u0631\u0648\u06cc \u0645\u062d\u062a\u0648\u0627\u06cc \u0622\u0646 \u06a9\u0646\u062a\u0631\u0644 \u0646\u062f\u0627\u0631\u062f. \u0628\u0631\u0627\u06cc \u0645\u062b\u0627\u0644\u060c \u0627\u06af\u0631 \u06a9\u0627\u0631\u0628\u0631\u06cc \u0627\u062c\u0627\u0632\u0647 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 Secrets \u0631\u0627 \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u062f\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u0645\u062d\u062a\u0648\u0627\u06cc \u0631\u0645\u0632\u06af\u0630\u0627\u0631\u06cc\u200c\u0634\u062f\u0647 \u0622\u0646\u200c\u0647\u0627 \u062f\u0633\u062a\u0631\u0633\u06cc \u067e\u06cc\u062f\u0627 \u06a9\u0646\u062f\u060c \u0628\u062f\u0648\u0646 \u0627\u06cc\u0646\u06a9\u0647 RBAC \u0628\u062a\u0648\u0627\u0646\u062f \u0633\u0637\u062d \u062c\u0632\u0626\u06cc\u200c\u062a\u0631\u06cc \u0627\u0632 \u0645\u062d\u062f\u0648\u062f\u06cc\u062a \u0627\u0639\u0645\u0627\u0644 \u06a9\u0646\u062f.<\/p>\n\n\n\n<p><strong>\u06f2. \u0639\u062f\u0645 \u062c\u0644\u0648\u06af\u06cc\u0631\u06cc \u0627\u0632 Privilege Escalation \u062f\u0631 \u0633\u0637\u062d Pod<\/strong><\/p>\n\n\n\n<p>\u062f\u0631 \u0635\u0648\u0631\u062a\u06cc \u06a9\u0647 \u06a9\u0627\u0631\u0628\u0631 \u0627\u062c\u0627\u0632\u0647 \u0627\u06cc\u062c\u0627\u062f \u067e\u0627\u062f \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u062f\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0627\u062a\u0635\u0627\u0644 Service Account\u0647\u0627\u06cc \u062f\u0627\u0631\u0627\u06cc \u0633\u0637\u062d \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0627\u0644\u0627\u062a\u0631\u060c \u0628\u0647 \u0645\u062c\u0648\u0632\u0647\u0627\u06cc \u0628\u06cc\u0634\u062a\u0631\u06cc \u062f\u0633\u062a \u067e\u06cc\u062f\u0627 \u06a9\u0646\u062f. RBAC \u0628\u0647\u200c\u062a\u0646\u0647\u0627\u06cc\u06cc \u062c\u0644\u0648\u06cc \u0627\u06cc\u0646 \u0646\u0648\u0639 \u0627\u0631\u062a\u0642\u0627 \u0633\u0637\u062d \u062f\u0633\u062a\u0631\u0633\u06cc \u0631\u0627 \u0646\u0645\u06cc\u200c\u06af\u06cc\u0631\u062f.<\/p>\n\n\n\n<p><strong>\u06f3. \u0645\u062d\u062f\u0648\u062f\u06cc\u062a \u062f\u0631 \u06a9\u0646\u062a\u0631\u0644 \u0645\u0646\u0627\u0628\u0639 \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u06cc<\/strong><\/p>\n\n\n\n<p>RBAC \u0641\u0642\u0637 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0627\u06cc\u062c\u0627\u062f \u06cc\u0627 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0645\u0646\u0627\u0628\u0639 \u0631\u0627 \u06a9\u0646\u062a\u0631\u0644 \u0645\u06cc\u200c\u06a9\u0646\u062f\u060c \u0627\u0645\u0627 \u0646\u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0646\u0648\u0639 \u06cc\u0627 \u0631\u0641\u062a\u0627\u0631 \u062f\u0642\u06cc\u0642 \u0628\u0631\u062e\u06cc \u0645\u0646\u0627\u0628\u0639 \u0631\u0627 \u0645\u062d\u062f\u0648\u062f \u06a9\u0646\u062f. \u0628\u0631\u0627\u06cc \u0645\u062b\u0627\u0644\u060c \u06a9\u0627\u0631\u0628\u0631 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u062f\u0631 \u0635\u0648\u0631\u062a \u062f\u0627\u0634\u062a\u0646 \u0645\u062c\u0648\u0632\u060c \u0646\u0648\u0639 PersistentVolume \u0631\u0627 \u0628\u0647 \u0634\u06a9\u0644\u06cc \u0627\u0646\u062a\u062e\u0627\u0628 \u06a9\u0646\u062f \u06a9\u0647 \u0631\u06cc\u0633\u06a9 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0627\u06cc\u062c\u0627\u062f \u06a9\u0646\u062f.<\/p>\n\n\n\n<p><strong>\u06f4. \u0639\u062f\u0645 \u06a9\u0646\u062a\u0631\u0644 \u0631\u0648\u06cc \u0639\u0645\u0644\u06cc\u0627\u062a\u200c\u0647\u0627\u06cc \u062d\u0633\u0627\u0633 \u062e\u0627\u0635<\/strong><\/p>\n\n\n\n<p>\u0628\u0631\u062e\u06cc \u0639\u0645\u0644\u06cc\u0627\u062a \u0645\u0627\u0646\u0646\u062f <code>impersonate<\/code> \u060c<code>bind<\/code> \u0648 <code>escalate<\/code> \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0646\u062f \u0645\u0646\u062c\u0631 \u0628\u0647 \u062f\u0648\u0631 \u0632\u062f\u0646 \u0633\u06cc\u0627\u0633\u062a\u200c\u0647\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0634\u0648\u0646\u062f. RBAC \u0627\u06cc\u0646 \u0639\u0645\u0644\u06cc\u0627\u062a\u200c\u0647\u0627 \u0631\u0627 \u062f\u0631 \u0633\u0637\u062d \u0645\u0646\u0637\u0642\u06cc \u06a9\u0646\u062a\u0631\u0644 \u0645\u06cc\u200c\u06a9\u0646\u062f\u060c \u0627\u0645\u0627 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0622\u0646\u200c\u0647\u0627 \u062f\u0631 \u0635\u0648\u0631\u062a \u062f\u0627\u0634\u062a\u0646 \u0645\u062c\u0648\u0632\u060c \u0647\u0645\u0686\u0646\u0627\u0646 \u0627\u0645\u06a9\u0627\u0646\u200c\u067e\u0630\u06cc\u0631 \u0627\u0633\u062a.<\/p>\n\n\n\n<p><strong>\u06f5. \u0645\u062d\u062f\u0648\u062f\u06cc\u062a \u062f\u0631 \u0628\u0631\u0627\u0628\u0631 \u062d\u0645\u0644\u0627\u062a \u0633\u0637\u062d \u06a9\u0644\u0627\u0633\u062a\u0631<\/strong><\/p>\n\n\n\n<p>RBAC \u062a\u0648\u0627\u0646\u0627\u06cc\u06cc \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u0631\u0641\u062a\u0627\u0631\u0647\u0627\u06cc\u06cc \u0645\u0627\u0646\u0646\u062f \u0627\u06cc\u062c\u0627\u062f \u062d\u062c\u0645 \u0628\u0627\u0644\u0627\u06cc resource \u0648 \u0645\u0635\u0631\u0641 \u0628\u06cc\u0634 \u0627\u0632 \u062d\u062f etcd \u06cc\u0627 CPU \u0631\u0627 \u0646\u062f\u0627\u0631\u062f. \u0628\u0631\u0627\u06cc \u0627\u06cc\u0646 \u0645\u0648\u0627\u0631\u062f \u0628\u0627\u06cc\u062f \u0627\u0632 \u0645\u06a9\u0627\u0646\u06cc\u0632\u0645\u200c\u0647\u0627\u06cc \u0645\u06a9\u0645\u0644 \u0645\u0627\u0646\u0646\u062f ResourceQuota \u0648 LimitRange \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0634\u0648\u062f.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-\u062c\u0645\u0639-\u0628\u0646\u062f\u06cc\"><a><\/a>\u062c\u0645\u0639\u200c\u0628\u0646\u062f\u06cc<\/h2>\n\n\n\n<p>RBAC \u062f\u0631 \u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632 \u06cc\u06a9\u06cc \u0627\u0632 \u0645\u0647\u0645\u200c\u062a\u0631\u06cc\u0646 \u0644\u0627\u06cc\u0647\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0628\u0631\u0627\u06cc \u0645\u062f\u06cc\u0631\u06cc\u062a \u062f\u0633\u062a\u0631\u0633\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0648 \u0633\u0631\u0648\u06cc\u0633\u200c\u0647\u0627 \u062f\u0631 \u06a9\u0644\u0627\u0633\u062a\u0631 \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0645\u06a9\u0627\u0646\u06cc\u0632\u0645 \u0628\u0631 \u067e\u0627\u06cc\u0647 \u062a\u0639\u0631\u06cc\u0641 \u0646\u0642\u0634\u200c\u0647\u0627 (Role \u0648 ClusterRole)\u060c \u0627\u062a\u0635\u0627\u0644 \u0622\u0646\u200c\u0647\u0627 \u0628\u0647 \u0647\u0648\u06cc\u062a\u200c\u0647\u0627 (RoleBinding \u0648 ClusterRoleBinding) \u0648 \u0627\u0639\u0645\u0627\u0644 \u0633\u06cc\u0627\u0633\u062a\u200c\u0647\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u062f\u0631 \u0633\u0637\u062d API Server \u0639\u0645\u0644 \u0645\u06cc\u200c\u06a9\u0646\u062f.<\/p>\n\n\n\n<p>\u062f\u0631 \u0633\u0637\u062d \u0639\u0645\u0644\u06cc\u060c RBAC \u0628\u0647 \u0634\u0645\u0627 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u062f\u0633\u062a\u0631\u0633\u06cc\u200c\u0647\u0627 \u0631\u0627 \u0628\u0647\u200c\u0635\u0648\u0631\u062a \u062f\u0642\u06cc\u0642 \u0648 \u0645\u062d\u062f\u0648\u062f \u062f\u0631 \u0633\u0637\u062d Namespace \u06cc\u0627 \u06a9\u0644 \u06a9\u0644\u0627\u0633\u062a\u0631 \u06a9\u0646\u062a\u0631\u0644 \u06a9\u0646\u06cc\u062f \u0648 \u0627\u0635\u0644 Least Privilege \u0631\u0627 \u067e\u06cc\u0627\u062f\u0647\u200c\u0633\u0627\u0632\u06cc \u06a9\u0646\u06cc\u062f. \u0628\u0627 \u0627\u06cc\u0646 \u062d\u0627\u0644\u060c \u0627\u06cc\u0646 \u0633\u06cc\u0633\u062a\u0645 \u0628\u0647\u200c\u062a\u0646\u0647\u0627\u06cc\u06cc \u06a9\u0627\u0641\u06cc \u0646\u06cc\u0633\u062a \u0648 \u0628\u0627\u06cc\u062f \u062f\u0631 \u06a9\u0646\u0627\u0631 \u0633\u0627\u06cc\u0631 \u0645\u06a9\u0627\u0646\u06cc\u0632\u0645\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0645\u0627\u0646\u0646\u062f ResourceQuota\u060c LimitRange \u0648 \u0633\u06cc\u0627\u0633\u062a\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u062a\u06a9\u0645\u06cc\u0644\u06cc \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0634\u0648\u062f.<\/p>\n\n\n\n<p>\u0647\u0645\u0686\u0646\u06cc\u0646 \u0628\u06cc\u0634\u062a\u0631\u06cc\u0646 \u062e\u0637\u0627\u0647\u0627 \u062f\u0631 \u067e\u06cc\u0627\u062f\u0647\u200c\u0633\u0627\u0632\u06cc RBAC \u0645\u0639\u0645\u0648\u0644\u0627\u064b \u0646\u0627\u0634\u06cc \u0627\u0632 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0628\u06cc\u0634 \u0627\u0632 \u062d\u062f \u0627\u0632 \u062f\u0633\u062a\u0631\u0633\u06cc\u200c\u0647\u0627\u06cc \u0633\u0631\u0627\u0633\u0631\u06cc\u060c \u0628\u06cc\u200c\u062a\u0648\u062c\u0647\u06cc \u0628\u0647 Service Account\u0647\u0627 \u0648 \u0639\u062f\u0645 \u0628\u0627\u0632\u0628\u06cc\u0646\u06cc \u062f\u0648\u0631\u0647\u200c\u0627\u06cc \u0645\u062c\u0648\u0632\u0647\u0627\u0633\u062a. \u062f\u0631 \u0646\u0647\u0627\u06cc\u062a\u060c RBAC \u06cc\u06a9 \u0627\u0628\u0632\u0627\u0631 \u067e\u0627\u06cc\u0647 \u0648 \u0636\u0631\u0648\u0631\u06cc \u0628\u0631\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a Kubernetes \u0627\u0633\u062a\u060c \u0627\u0645\u0627 \u0627\u0631\u0632\u0634 \u0648\u0627\u0642\u0639\u06cc \u0622\u0646 \u0632\u0645\u0627\u0646\u06cc \u0645\u0634\u062e\u0635 \u0645\u06cc\u200c\u0634\u0648\u062f \u06a9\u0647 \u0628\u0647\u200c\u062f\u0631\u0633\u062a\u06cc \u0637\u0631\u0627\u062d\u06cc\u060c \u0645\u062d\u062f\u0648\u062f \u0648 \u062f\u0631 \u06a9\u0646\u0627\u0631 \u0633\u0627\u06cc\u0631 \u0644\u0627\u06cc\u0647\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0634\u0648\u062f.<\/p>\n\n\n\n<p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>RBAC \u062f\u0631 \u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632 \u06cc\u06a9\u06cc \u0627\u0632 \u0627\u0635\u0644\u06cc\u200c\u062a\u0631\u06cc\u0646 \u0645\u06a9\u0627\u0646\u06cc\u0632\u0645\u200c\u0647\u0627\u06cc \u06a9\u0646\u062a\u0631\u0644 \u062f\u0633\u062a\u0631\u0633\u06cc \u062f\u0631 \u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632 \u0627\u0633\u062a \u06a9\u0647 \u062a\u0639\u06cc\u06cc\u0646 \u0645\u06cc\u200c\u06a9\u0646\u062f \u0647\u0631 \u06a9\u0627\u0631\u0628\u0631\u060c \u0633\u0631\u0648\u06cc\u0633 \u06cc\u0627 \u0628\u0631\u0646\u0627\u0645\u0647 \u0686\u0647 \u0639\u0645\u0644\u06cc\u0627\u062a\u06cc \u0631\u0627 \u0631\u0648\u06cc \u0645\u0646\u0627\u0628\u0639 \u06a9\u0644\u0627\u0633\u062a\u0631 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0627\u0646\u062c\u0627\u0645 \u062f\u0647\u062f. \u0627\u06cc\u0646 \u0633\u06cc\u0633\u062a\u0645 \u0628\u0627 \u062a\u06a9\u06cc\u0647 \u0628\u0631 \u0646\u0642\u0634\u200c\u0647\u0627 (Role \u0648 ClusterRole) \u0648 \u0627\u062a\u0635\u0627\u0644 \u0622\u0646\u200c\u0647\u0627 \u0628\u0647 \u0647\u0648\u06cc\u062a\u200c\u0647\u0627 (RoleBinding \u0648 ClusterRoleBinding)\u060c \u0644\u0627\u06cc\u0647 Authorization \u062f\u0631 API Server \u0631\u0627 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0645\u06cc\u200c\u06a9\u0646\u062f \u0648 [&hellip;]<\/p>\n","protected":false},"author":27,"featured_media":5202,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1,54],"tags":[],"coauthors":[91],"class_list":["post-5199","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-articles","category-kubernetes"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.7 (Yoast SEO v27.7) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>RBAC \u062f\u0631 \u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632 \u0686\u06cc\u0633\u062a\u061f \u0622\u0634\u0646\u0627\u06cc\u06cc \u0628\u0627 \u0627\u062c\u0632\u0627 \u0648 \u0631\u0648\u0634\u200c\u0647\u0627\u06cc \u067e\u06cc\u0627\u062f\u0647\u200c\u0633\u0627\u0632\u06cc - \u0628\u0644\u0627\u06af \u0647\u0645\u200c\u0631\u0648\u0634<\/title>\n<meta name=\"description\" content=\"RBAC \u062f\u0631 \u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632 \u0686\u06cc\u0633\u062a \u0648 \u0686\u06af\u0648\u0646\u0647 \u06a9\u0627\u0631 \u0645\u06cc\u200c\u06a9\u0646\u062f\u061f \u0622\u0634\u0646\u0627\u06cc\u06cc \u0628\u0627 \u0646\u062d\u0648\u0647 \u067e\u06cc\u0627\u062f\u0647\u200c\u0633\u0627\u0632\u06cc RBAC\u060c \u0645\u062b\u0627\u0644 \u0639\u0645\u0644\u06cc \u0648 \u0645\u062d\u062f\u0648\u062f\u06cc\u062a\u200c\u0647\u0627\u06cc \u0622\u0646 \u062f\u0631 Kubernetes\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/hamravesh.com\/blog\/what-is-kubernetes-rbac\/\" \/>\n<meta property=\"og:locale\" content=\"fa_IR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"RBAC \u062f\u0631 \u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632 \u0686\u06cc\u0633\u062a\u061f \u0622\u0634\u0646\u0627\u06cc\u06cc \u0628\u0627 \u0627\u062c\u0632\u0627 \u0648 \u0631\u0648\u0634\u200c\u0647\u0627\u06cc \u067e\u06cc\u0627\u062f\u0647\u200c\u0633\u0627\u0632\u06cc\" \/>\n<meta property=\"og:description\" content=\"RBAC \u062f\u0631 \u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632 \u0686\u06cc\u0633\u062a \u0648 \u0686\u06af\u0648\u0646\u0647 \u06a9\u0627\u0631 \u0645\u06cc\u200c\u06a9\u0646\u062f\u061f \u0622\u0634\u0646\u0627\u06cc\u06cc \u0628\u0627 \u0646\u062d\u0648\u0647 \u067e\u06cc\u0627\u062f\u0647\u200c\u0633\u0627\u0632\u06cc RBAC\u060c \u0645\u062b\u0627\u0644 \u0639\u0645\u0644\u06cc \u0648 \u0645\u062d\u062f\u0648\u062f\u06cc\u062a\u200c\u0647\u0627\u06cc \u0622\u0646 \u062f\u0631 Kubernetes\" \/>\n<meta property=\"og:url\" content=\"https:\/\/hamravesh.com\/blog\/what-is-kubernetes-rbac\/\" \/>\n<meta property=\"og:site_name\" content=\"\u0628\u0644\u0627\u06af \u0647\u0645\u200c\u0631\u0648\u0634\" \/>\n<meta property=\"article:published_time\" content=\"2026-05-27T12:30:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-05-30T08:20:38+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/hamravesh.com\/blog\/wp-content\/uploads\/2026\/05\/hamravesh-what-is-kubernetes-rbac01.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1201\" \/>\n\t<meta property=\"og:image:height\" content=\"565\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"\u0647\u0645\u200c\u0631\u0648\u0634\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u0646\u0648\u0634\u062a\u0647 \u0634\u062f\u0647 \u062a\u0648\u0633\u0637\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u0647\u0645\u200c\u0631\u0648\u0634\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u0632\u0645\u0627\u0646 \u062a\u062e\u0645\u06cc\u0646\u06cc \u0645\u0637\u0627\u0644\u0639\u0647\" \/>\n\t<meta name=\"twitter:data2\" content=\"13 \u062f\u0642\u06cc\u0642\u0647\" \/>\n\t<meta name=\"twitter:label3\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data3\" content=\"\u0647\u0645\u200c\u0631\u0648\u0634\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/hamravesh.com\\\/blog\\\/what-is-kubernetes-rbac\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/hamravesh.com\\\/blog\\\/what-is-kubernetes-rbac\\\/\"},\"author\":{\"name\":\"\u0647\u0645\u200c\u0631\u0648\u0634\",\"@id\":\"https:\\\/\\\/hamravesh.com\\\/blog\\\/#\\\/schema\\\/person\\\/168bec87a2f96b07c69a938599c98ba4\"},\"headline\":\"RBAC \u062f\u0631 \u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632 \u0686\u06cc\u0633\u062a\u061f \u0622\u0634\u0646\u0627\u06cc\u06cc \u0628\u0627 \u0627\u062c\u0632\u0627 \u0648 \u0631\u0648\u0634\u200c\u0647\u0627\u06cc \u067e\u06cc\u0627\u062f\u0647\u200c\u0633\u0627\u0632\u06cc\",\"datePublished\":\"2026-05-27T12:30:00+00:00\",\"dateModified\":\"2026-05-30T08:20:38+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/hamravesh.com\\\/blog\\\/what-is-kubernetes-rbac\\\/\"},\"wordCount\":301,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/hamravesh.com\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/hamravesh.com\\\/blog\\\/what-is-kubernetes-rbac\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/hamravesh.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/hamravesh-what-is-kubernetes-rbac01.webp\",\"articleSection\":[\"\u0645\u0642\u0627\u0644\u0627\u062a\",\"\u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632\"],\"inLanguage\":\"fa-IR\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/hamravesh.com\\\/blog\\\/what-is-kubernetes-rbac\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/hamravesh.com\\\/blog\\\/what-is-kubernetes-rbac\\\/\",\"url\":\"https:\\\/\\\/hamravesh.com\\\/blog\\\/what-is-kubernetes-rbac\\\/\",\"name\":\"RBAC \u062f\u0631 \u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632 \u0686\u06cc\u0633\u062a\u061f \u0622\u0634\u0646\u0627\u06cc\u06cc \u0628\u0627 \u0627\u062c\u0632\u0627 \u0648 \u0631\u0648\u0634\u200c\u0647\u0627\u06cc \u067e\u06cc\u0627\u062f\u0647\u200c\u0633\u0627\u0632\u06cc - \u0628\u0644\u0627\u06af \u0647\u0645\u200c\u0631\u0648\u0634\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/hamravesh.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/hamravesh.com\\\/blog\\\/what-is-kubernetes-rbac\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/hamravesh.com\\\/blog\\\/what-is-kubernetes-rbac\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/hamravesh.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/hamravesh-what-is-kubernetes-rbac01.webp\",\"datePublished\":\"2026-05-27T12:30:00+00:00\",\"dateModified\":\"2026-05-30T08:20:38+00:00\",\"description\":\"RBAC \u062f\u0631 \u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632 \u0686\u06cc\u0633\u062a \u0648 \u0686\u06af\u0648\u0646\u0647 \u06a9\u0627\u0631 \u0645\u06cc\u200c\u06a9\u0646\u062f\u061f \u0622\u0634\u0646\u0627\u06cc\u06cc \u0628\u0627 \u0646\u062d\u0648\u0647 \u067e\u06cc\u0627\u062f\u0647\u200c\u0633\u0627\u0632\u06cc RBAC\u060c \u0645\u062b\u0627\u0644 \u0639\u0645\u0644\u06cc \u0648 \u0645\u062d\u062f\u0648\u062f\u06cc\u062a\u200c\u0647\u0627\u06cc \u0622\u0646 \u062f\u0631 Kubernetes\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/hamravesh.com\\\/blog\\\/what-is-kubernetes-rbac\\\/#breadcrumb\"},\"inLanguage\":\"fa-IR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/hamravesh.com\\\/blog\\\/what-is-kubernetes-rbac\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"fa-IR\",\"@id\":\"https:\\\/\\\/hamravesh.com\\\/blog\\\/what-is-kubernetes-rbac\\\/#primaryimage\",\"url\":\"https:\\\/\\\/hamravesh.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/hamravesh-what-is-kubernetes-rbac01.webp\",\"contentUrl\":\"https:\\\/\\\/hamravesh.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/hamravesh-what-is-kubernetes-rbac01.webp\",\"width\":1201,\"height\":565,\"caption\":\"RBAC \u062f\u0631 \u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632 \u0686\u06cc\u0633\u062a\u061f \u0622\u0634\u0646\u0627\u06cc\u06cc \u0628\u0627 \u0631\u0648\u0634\u200c\u0647\u0627\u06cc \u067e\u06cc\u0627\u062f\u0647\u200c\u0633\u0627\u0632\u06cc\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/hamravesh.com\\\/blog\\\/what-is-kubernetes-rbac\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u0645\u062c\u0644\u0647 \u0647\u0645\u200c\u0631\u0648\u0634\",\"item\":\"https:\\\/\\\/hamravesh.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"RBAC \u062f\u0631 \u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632 \u0686\u06cc\u0633\u062a\u061f \u0622\u0634\u0646\u0627\u06cc\u06cc \u0628\u0627 \u0627\u062c\u0632\u0627 \u0648 \u0631\u0648\u0634\u200c\u0647\u0627\u06cc \u067e\u06cc\u0627\u062f\u0647\u200c\u0633\u0627\u0632\u06cc\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/hamravesh.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/hamravesh.com\\\/blog\\\/\",\"name\":\"\u0648\u0628\u0644\u0627\u06af \u0647\u0645\u200c\u0631\u0648\u0634\",\"description\":\"\u0628\u0644\u0627\u06af \u0631\u0633\u0645\u06cc \u0647\u0645\u200c\u0631\u0648\u0634\",\"publisher\":{\"@id\":\"https:\\\/\\\/hamravesh.com\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/hamravesh.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"fa-IR\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/hamravesh.com\\\/blog\\\/#organization\",\"name\":\"\u0647\u0645\u200c\u0631\u0648\u0634\",\"url\":\"https:\\\/\\\/hamravesh.com\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fa-IR\",\"@id\":\"https:\\\/\\\/hamravesh.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/hamravesh.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/03\\\/logo.svg\",\"contentUrl\":\"https:\\\/\\\/hamravesh.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/03\\\/logo.svg\",\"width\":1,\"height\":1,\"caption\":\"\u0647\u0645\u200c\u0631\u0648\u0634\"},\"image\":{\"@id\":\"https:\\\/\\\/hamravesh.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/hamravesh.com\\\/blog\\\/#\\\/schema\\\/person\\\/168bec87a2f96b07c69a938599c98ba4\",\"name\":\"\u0647\u0645\u200c\u0631\u0648\u0634\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fa-IR\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/ab32563e8fb141b88540ca44848a1b68f69b8c2399e5d9af84c5eacb21f703f5?s=96&d=mm&r=g17ac4908f5e6ca2876eb1c0c147b7245\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/ab32563e8fb141b88540ca44848a1b68f69b8c2399e5d9af84c5eacb21f703f5?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/ab32563e8fb141b88540ca44848a1b68f69b8c2399e5d9af84c5eacb21f703f5?s=96&d=mm&r=g\",\"caption\":\"\u0647\u0645\u200c\u0631\u0648\u0634\"},\"url\":\"https:\\\/\\\/hamravesh.com\\\/blog\\\/author\\\/hamravesh-blog\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"RBAC \u062f\u0631 \u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632 \u0686\u06cc\u0633\u062a\u061f \u0622\u0634\u0646\u0627\u06cc\u06cc \u0628\u0627 \u0627\u062c\u0632\u0627 \u0648 \u0631\u0648\u0634\u200c\u0647\u0627\u06cc \u067e\u06cc\u0627\u062f\u0647\u200c\u0633\u0627\u0632\u06cc - \u0628\u0644\u0627\u06af \u0647\u0645\u200c\u0631\u0648\u0634","description":"RBAC \u062f\u0631 \u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632 \u0686\u06cc\u0633\u062a \u0648 \u0686\u06af\u0648\u0646\u0647 \u06a9\u0627\u0631 \u0645\u06cc\u200c\u06a9\u0646\u062f\u061f \u0622\u0634\u0646\u0627\u06cc\u06cc \u0628\u0627 \u0646\u062d\u0648\u0647 \u067e\u06cc\u0627\u062f\u0647\u200c\u0633\u0627\u0632\u06cc RBAC\u060c \u0645\u062b\u0627\u0644 \u0639\u0645\u0644\u06cc \u0648 \u0645\u062d\u062f\u0648\u062f\u06cc\u062a\u200c\u0647\u0627\u06cc \u0622\u0646 \u062f\u0631 Kubernetes","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/hamravesh.com\/blog\/what-is-kubernetes-rbac\/","og_locale":"fa_IR","og_type":"article","og_title":"RBAC \u062f\u0631 \u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632 \u0686\u06cc\u0633\u062a\u061f \u0622\u0634\u0646\u0627\u06cc\u06cc \u0628\u0627 \u0627\u062c\u0632\u0627 \u0648 \u0631\u0648\u0634\u200c\u0647\u0627\u06cc \u067e\u06cc\u0627\u062f\u0647\u200c\u0633\u0627\u0632\u06cc","og_description":"RBAC \u062f\u0631 \u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632 \u0686\u06cc\u0633\u062a \u0648 \u0686\u06af\u0648\u0646\u0647 \u06a9\u0627\u0631 \u0645\u06cc\u200c\u06a9\u0646\u062f\u061f \u0622\u0634\u0646\u0627\u06cc\u06cc \u0628\u0627 \u0646\u062d\u0648\u0647 \u067e\u06cc\u0627\u062f\u0647\u200c\u0633\u0627\u0632\u06cc RBAC\u060c \u0645\u062b\u0627\u0644 \u0639\u0645\u0644\u06cc \u0648 \u0645\u062d\u062f\u0648\u062f\u06cc\u062a\u200c\u0647\u0627\u06cc \u0622\u0646 \u062f\u0631 Kubernetes","og_url":"https:\/\/hamravesh.com\/blog\/what-is-kubernetes-rbac\/","og_site_name":"\u0628\u0644\u0627\u06af \u0647\u0645\u200c\u0631\u0648\u0634","article_published_time":"2026-05-27T12:30:00+00:00","article_modified_time":"2026-05-30T08:20:38+00:00","og_image":[{"width":1201,"height":565,"url":"https:\/\/hamravesh.com\/blog\/wp-content\/uploads\/2026\/05\/hamravesh-what-is-kubernetes-rbac01.webp","type":"image\/webp"}],"author":"\u0647\u0645\u200c\u0631\u0648\u0634","twitter_card":"summary_large_image","twitter_misc":{"\u0646\u0648\u0634\u062a\u0647 \u0634\u062f\u0647 \u062a\u0648\u0633\u0637":"\u0647\u0645\u200c\u0631\u0648\u0634","\u0632\u0645\u0627\u0646 \u062a\u062e\u0645\u06cc\u0646\u06cc \u0645\u0637\u0627\u0644\u0639\u0647":"13 \u062f\u0642\u06cc\u0642\u0647","Written by":"\u0647\u0645\u200c\u0631\u0648\u0634"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/hamravesh.com\/blog\/what-is-kubernetes-rbac\/#article","isPartOf":{"@id":"https:\/\/hamravesh.com\/blog\/what-is-kubernetes-rbac\/"},"author":{"name":"\u0647\u0645\u200c\u0631\u0648\u0634","@id":"https:\/\/hamravesh.com\/blog\/#\/schema\/person\/168bec87a2f96b07c69a938599c98ba4"},"headline":"RBAC \u062f\u0631 \u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632 \u0686\u06cc\u0633\u062a\u061f \u0622\u0634\u0646\u0627\u06cc\u06cc \u0628\u0627 \u0627\u062c\u0632\u0627 \u0648 \u0631\u0648\u0634\u200c\u0647\u0627\u06cc \u067e\u06cc\u0627\u062f\u0647\u200c\u0633\u0627\u0632\u06cc","datePublished":"2026-05-27T12:30:00+00:00","dateModified":"2026-05-30T08:20:38+00:00","mainEntityOfPage":{"@id":"https:\/\/hamravesh.com\/blog\/what-is-kubernetes-rbac\/"},"wordCount":301,"commentCount":0,"publisher":{"@id":"https:\/\/hamravesh.com\/blog\/#organization"},"image":{"@id":"https:\/\/hamravesh.com\/blog\/what-is-kubernetes-rbac\/#primaryimage"},"thumbnailUrl":"https:\/\/hamravesh.com\/blog\/wp-content\/uploads\/2026\/05\/hamravesh-what-is-kubernetes-rbac01.webp","articleSection":["\u0645\u0642\u0627\u0644\u0627\u062a","\u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632"],"inLanguage":"fa-IR","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/hamravesh.com\/blog\/what-is-kubernetes-rbac\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/hamravesh.com\/blog\/what-is-kubernetes-rbac\/","url":"https:\/\/hamravesh.com\/blog\/what-is-kubernetes-rbac\/","name":"RBAC \u062f\u0631 \u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632 \u0686\u06cc\u0633\u062a\u061f \u0622\u0634\u0646\u0627\u06cc\u06cc \u0628\u0627 \u0627\u062c\u0632\u0627 \u0648 \u0631\u0648\u0634\u200c\u0647\u0627\u06cc \u067e\u06cc\u0627\u062f\u0647\u200c\u0633\u0627\u0632\u06cc - \u0628\u0644\u0627\u06af \u0647\u0645\u200c\u0631\u0648\u0634","isPartOf":{"@id":"https:\/\/hamravesh.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/hamravesh.com\/blog\/what-is-kubernetes-rbac\/#primaryimage"},"image":{"@id":"https:\/\/hamravesh.com\/blog\/what-is-kubernetes-rbac\/#primaryimage"},"thumbnailUrl":"https:\/\/hamravesh.com\/blog\/wp-content\/uploads\/2026\/05\/hamravesh-what-is-kubernetes-rbac01.webp","datePublished":"2026-05-27T12:30:00+00:00","dateModified":"2026-05-30T08:20:38+00:00","description":"RBAC \u062f\u0631 \u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632 \u0686\u06cc\u0633\u062a \u0648 \u0686\u06af\u0648\u0646\u0647 \u06a9\u0627\u0631 \u0645\u06cc\u200c\u06a9\u0646\u062f\u061f \u0622\u0634\u0646\u0627\u06cc\u06cc \u0628\u0627 \u0646\u062d\u0648\u0647 \u067e\u06cc\u0627\u062f\u0647\u200c\u0633\u0627\u0632\u06cc RBAC\u060c \u0645\u062b\u0627\u0644 \u0639\u0645\u0644\u06cc \u0648 \u0645\u062d\u062f\u0648\u062f\u06cc\u062a\u200c\u0647\u0627\u06cc \u0622\u0646 \u062f\u0631 Kubernetes","breadcrumb":{"@id":"https:\/\/hamravesh.com\/blog\/what-is-kubernetes-rbac\/#breadcrumb"},"inLanguage":"fa-IR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/hamravesh.com\/blog\/what-is-kubernetes-rbac\/"]}]},{"@type":"ImageObject","inLanguage":"fa-IR","@id":"https:\/\/hamravesh.com\/blog\/what-is-kubernetes-rbac\/#primaryimage","url":"https:\/\/hamravesh.com\/blog\/wp-content\/uploads\/2026\/05\/hamravesh-what-is-kubernetes-rbac01.webp","contentUrl":"https:\/\/hamravesh.com\/blog\/wp-content\/uploads\/2026\/05\/hamravesh-what-is-kubernetes-rbac01.webp","width":1201,"height":565,"caption":"RBAC \u062f\u0631 \u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632 \u0686\u06cc\u0633\u062a\u061f \u0622\u0634\u0646\u0627\u06cc\u06cc \u0628\u0627 \u0631\u0648\u0634\u200c\u0647\u0627\u06cc \u067e\u06cc\u0627\u062f\u0647\u200c\u0633\u0627\u0632\u06cc"},{"@type":"BreadcrumbList","@id":"https:\/\/hamravesh.com\/blog\/what-is-kubernetes-rbac\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u0645\u062c\u0644\u0647 \u0647\u0645\u200c\u0631\u0648\u0634","item":"https:\/\/hamravesh.com\/blog\/"},{"@type":"ListItem","position":2,"name":"RBAC \u062f\u0631 \u06a9\u0648\u0628\u0631\u0646\u062a\u06cc\u0632 \u0686\u06cc\u0633\u062a\u061f \u0622\u0634\u0646\u0627\u06cc\u06cc \u0628\u0627 \u0627\u062c\u0632\u0627 \u0648 \u0631\u0648\u0634\u200c\u0647\u0627\u06cc \u067e\u06cc\u0627\u062f\u0647\u200c\u0633\u0627\u0632\u06cc"}]},{"@type":"WebSite","@id":"https:\/\/hamravesh.com\/blog\/#website","url":"https:\/\/hamravesh.com\/blog\/","name":"\u0648\u0628\u0644\u0627\u06af \u0647\u0645\u200c\u0631\u0648\u0634","description":"\u0628\u0644\u0627\u06af \u0631\u0633\u0645\u06cc \u0647\u0645\u200c\u0631\u0648\u0634","publisher":{"@id":"https:\/\/hamravesh.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/hamravesh.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"fa-IR"},{"@type":"Organization","@id":"https:\/\/hamravesh.com\/blog\/#organization","name":"\u0647\u0645\u200c\u0631\u0648\u0634","url":"https:\/\/hamravesh.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"fa-IR","@id":"https:\/\/hamravesh.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/hamravesh.com\/blog\/wp-content\/uploads\/2026\/03\/logo.svg","contentUrl":"https:\/\/hamravesh.com\/blog\/wp-content\/uploads\/2026\/03\/logo.svg","width":1,"height":1,"caption":"\u0647\u0645\u200c\u0631\u0648\u0634"},"image":{"@id":"https:\/\/hamravesh.com\/blog\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/hamravesh.com\/blog\/#\/schema\/person\/168bec87a2f96b07c69a938599c98ba4","name":"\u0647\u0645\u200c\u0631\u0648\u0634","image":{"@type":"ImageObject","inLanguage":"fa-IR","@id":"https:\/\/secure.gravatar.com\/avatar\/ab32563e8fb141b88540ca44848a1b68f69b8c2399e5d9af84c5eacb21f703f5?s=96&d=mm&r=g17ac4908f5e6ca2876eb1c0c147b7245","url":"https:\/\/secure.gravatar.com\/avatar\/ab32563e8fb141b88540ca44848a1b68f69b8c2399e5d9af84c5eacb21f703f5?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/ab32563e8fb141b88540ca44848a1b68f69b8c2399e5d9af84c5eacb21f703f5?s=96&d=mm&r=g","caption":"\u0647\u0645\u200c\u0631\u0648\u0634"},"url":"https:\/\/hamravesh.com\/blog\/author\/hamravesh-blog\/"}]}},"_links":{"self":[{"href":"https:\/\/hamravesh.com\/blog\/wp-json\/wp\/v2\/posts\/5199","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hamravesh.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hamravesh.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hamravesh.com\/blog\/wp-json\/wp\/v2\/users\/27"}],"replies":[{"embeddable":true,"href":"https:\/\/hamravesh.com\/blog\/wp-json\/wp\/v2\/comments?post=5199"}],"version-history":[{"count":5,"href":"https:\/\/hamravesh.com\/blog\/wp-json\/wp\/v2\/posts\/5199\/revisions"}],"predecessor-version":[{"id":5206,"href":"https:\/\/hamravesh.com\/blog\/wp-json\/wp\/v2\/posts\/5199\/revisions\/5206"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/hamravesh.com\/blog\/wp-json\/wp\/v2\/media\/5202"}],"wp:attachment":[{"href":"https:\/\/hamravesh.com\/blog\/wp-json\/wp\/v2\/media?parent=5199"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hamravesh.com\/blog\/wp-json\/wp\/v2\/categories?post=5199"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hamravesh.com\/blog\/wp-json\/wp\/v2\/tags?post=5199"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/hamravesh.com\/blog\/wp-json\/wp\/v2\/coauthors?post=5199"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}