What you'll learn

A Kubernetes cluster without RBAC is a security incident waiting to happen. In this course, Certified Kubernetes Administrator (CKA): Securing Access with RBAC and Admission Controls, you'll gain the ability to implement granular access controls, manage workload identity, and enforce resource governance across namespaces. First, you'll explore the RBAC authorization model: Roles versus ClusterRoles, RoleBindings versus ClusterRoleBindings, and the verb/resource/namespace permission matrix. You'll create RBAC policies using both imperative commands and YAML manifests, and verify permissions with kubectl auth can-i. Next, you'll discover ServiceAccounts, the identity mechanism for pods and workloads. You'll understand the difference between projected volume tokens (time-limited, audience-scoped) and legacy secret-based tokens, and configure least-privilege ServiceAccounts for real workloads. Finally, you'll learn how admission controllers enforce policies at the API server level. You'll configure LimitRanges to set default resource requests and limits, create ResourceQuotas to cap namespace consumption, and apply security contexts to restrict pod privileges. When you're finished with this course, you'll have the RBAC and admission control skills needed to secure multi-tenant Kubernetes clusters and handle the authorization tasks that appear on the CKA exam.