diff --git a/content/RBAC permissions are additive.md b/content/RBAC permissions are additive.md index f93661b51..680f62379 100644 --- a/content/RBAC permissions are additive.md +++ b/content/RBAC permissions are additive.md @@ -4,4 +4,4 @@ Permissions from ClusterRolebindings and RoleBindings will be added to each othe -202404011021 \ No newline at end of file +202404011021Ma \ No newline at end of file diff --git a/content/RBAC.md b/content/RBAC.md index d01c1032c..a698c92f6 100644 --- a/content/RBAC.md +++ b/content/RBAC.md @@ -5,6 +5,10 @@ [[RBAC permissions are additive]] +[[ServiceAccounts are only used by non-humans]] + +[[Users do not live in the cluster as resources]] + ## Links: diff --git a/content/ServiceAccounts are only used by non-humans.md b/content/ServiceAccounts are only used by non-humans.md new file mode 100644 index 000000000..b2cfeee49 --- /dev/null +++ b/content/ServiceAccounts are only used by non-humans.md @@ -0,0 +1,9 @@ +Used for in-cluster controllers, pods. + +Managed by the Kubernetes API and lives in the cluster as a resource. + +## Links: + + + +202404011050 \ No newline at end of file diff --git a/content/Users do not live in the cluster as resources.md b/content/Users do not live in the cluster as resources.md new file mode 100644 index 000000000..50def7e6a --- /dev/null +++ b/content/Users do not live in the cluster as resources.md @@ -0,0 +1,12 @@ +There is no "User" resource in Kubernetes. + +[[Kubernetes users are simply holders of TLS Certificates]] + + + + +## Links: + + + +202404011053 \ No newline at end of file