{"id":1217,"date":"2026-03-11T23:09:13","date_gmt":"2026-03-11T14:09:13","guid":{"rendered":"http:\/\/www.igoni.kr\/?p=1217"},"modified":"2026-03-11T23:09:13","modified_gmt":"2026-03-11T14:09:13","slug":"rbac%ea%b8%b0%eb%b0%98%ec%9d%98-namespace-%ea%b6%8c%ed%95%9c%eb%b6%80%ec%97%ac","status":"publish","type":"post","link":"http:\/\/www.igoni.kr\/?p=1217","title":{"rendered":"rbac\uae30\ubc18\uc758 namespace \uad8c\ud55c\ubd80\uc5ec"},"content":{"rendered":"<p id=\"bkmrk-%EC%84%9C%EB%B9%84%EC%8A%A4-%EA%B3%84%EC%A0%95%EC%83%9D%EC%84%B1\">\uc11c\ube44\uc2a4 \uacc4\uc815\uc0dd\uc131<\/p>\n<pre id=\"bkmrk-%24%3E-kubectl-create-sa\"><code class=\"language-bash\">$&gt; kubectl create sa testuser\r\n<\/code><\/pre>\n<p id=\"bkmrk-role%EC%84%A4%EC%A0%95\">role\uc124\uc815<\/p>\n<pre id=\"bkmrk-%24%3E-cat-role.yaml-api\"><code class=\"language-bash\">$&gt; cat role.yaml\r\napiVersion: rbac.authozation.k8s.io\/v1\r\nkind: Role\r\nmetadata\r\n  name: ms-role\r\n  namespace: ms\r\nrules:\r\n- apiGroup: [\"\"]\r\n  resources: [\"*\"]\r\n  verbs: [\"get\", \"list\", \"watch\"]<\/code><\/pre>\n<p id=\"bkmrk-rolebinding-%EC%84%A4%EC%A0%95\">rolebinding \uc124\uc815<\/p>\n<pre id=\"bkmrk-%24%3E-rolebinding.yaml-\"><code class=\"language-bash\">$&gt; rolebinding.yaml\r\napiVersion: rbac.authorization.k8s.io\/v1\r\nkind: RoleBinding\r\nmetadata:\r\n  name: ms-rolebinding\r\n  namespace: ms\r\nroleRef:\r\n  apiGroup: rbac.authorization.k8s.io\r\n  kind: Role\r\n  name: ms-role\r\nsubjects:\r\n- kind: ServiceAccount\r\n  name: testuser\r\n  namespace: ms<\/code><\/pre>\n<table id=\"bkmrk-perplexity%EC%97%90%EC%84%9C-%EC%83%9D%EC%84%B1%ED%95%9C-ai%EC%9D%B4\" style=\"border-collapse: collapse; width: 100%; height: 59.5938px;\" border=\"1\">\n<tbody>\n<tr style=\"height: 29.7969px;\">\n<td style=\"height: 29.7969px;\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-1219\" src=\"http:\/\/www.igoni.kr\/wp-content\/uploads\/2026\/03\/d7671223-ff06-44e9-8558-2979e932262f-scaled.jpg\" alt=\"\" width=\"2560\" height=\"1438\" srcset=\"http:\/\/www.igoni.kr\/wp-content\/uploads\/2026\/03\/d7671223-ff06-44e9-8558-2979e932262f-scaled.jpg 2560w, http:\/\/www.igoni.kr\/wp-content\/uploads\/2026\/03\/d7671223-ff06-44e9-8558-2979e932262f-300x169.jpg 300w, http:\/\/www.igoni.kr\/wp-content\/uploads\/2026\/03\/d7671223-ff06-44e9-8558-2979e932262f-1024x575.jpg 1024w, http:\/\/www.igoni.kr\/wp-content\/uploads\/2026\/03\/d7671223-ff06-44e9-8558-2979e932262f-768x431.jpg 768w, http:\/\/www.igoni.kr\/wp-content\/uploads\/2026\/03\/d7671223-ff06-44e9-8558-2979e932262f-1536x863.jpg 1536w, http:\/\/www.igoni.kr\/wp-content\/uploads\/2026\/03\/d7671223-ff06-44e9-8558-2979e932262f-2048x1151.jpg 2048w, http:\/\/www.igoni.kr\/wp-content\/uploads\/2026\/03\/d7671223-ff06-44e9-8558-2979e932262f-1300x730.jpg 1300w\" sizes=\"auto, (max-width: 2560px) 100vw, 2560px\" \/><\/td>\n<\/tr>\n<tr style=\"height: 29.7969px;\">\n<td class=\"align-right\" style=\"height: 29.7969px;\">perplexity\uc5d0\uc11c \uc0dd\uc131\ud55c AI\uc774\ubbf8\uc9c0<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p id=\"bkmrk-auth-%ED%99%95%EC%9D%B8\">auth \ud655\uc778<\/p>\n<pre id=\"bkmrk-%24%3E-kubectl-auth-can-\"><code class=\"language-bash\">$&gt; kubectl auth can-i get pods --namespace=ms --as=system:serviceaccouint:default:testuser\r\nyes\r\n<\/code><\/pre>\n<p id=\"bkmrk-user-credential-%EC%83%9D%EC%84%B1\">user credential \uc0dd\uc131<\/p>\n<pre id=\"bkmrk-%24%3E-kubectl-describe-\"><code class=\"language-bash\">$&gt; kubectl describe serviceaccount testuser\r\n\r\n$&gt; kubectl describe secret testuser-token-123\r\n\r\n$&gt; kubectl config set-credentials testuser --token=testuser-token-123\r\n<\/code><\/pre>\n<p id=\"bkmrk-context%EC%83%9D%EC%84%B1\">context\uc0dd\uc131<\/p>\n<pre id=\"bkmrk-%24%3E-kubectl-config-se\"><code class=\"language-bash\">$&gt; kubectl config set-context test-context --cluster=testcluster --as=system:serviceaccount:default:testuser\r\nContext \"test-context\" created.\r\n\r\n$&gt; kubectl config get-contexts\r\n\r\n$&gt; kubectl config use-context test-context\r\nSwitched to context \"test-context\"\r\n<\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"<p>\uc11c\ube44\uc2a4 \uacc4\uc815\uc0dd\uc131 $&gt; kubectl create sa testuser role\uc124\uc815 $&gt; cat role.yaml apiVersion: rbac.authozation.k8s.io\/v1 kind: Role metadata&hellip;<\/p>\n","protected":false},"author":1,"featured_media":1219,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[319],"tags":[321,371],"class_list":["post-1217","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-kubernetes","tag-kubernetes","tag-rbac"],"aioseo_notices":[],"_links":{"self":[{"href":"http:\/\/www.igoni.kr\/index.php?rest_route=\/wp\/v2\/posts\/1217","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.igoni.kr\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.igoni.kr\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.igoni.kr\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/www.igoni.kr\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1217"}],"version-history":[{"count":1,"href":"http:\/\/www.igoni.kr\/index.php?rest_route=\/wp\/v2\/posts\/1217\/revisions"}],"predecessor-version":[{"id":1221,"href":"http:\/\/www.igoni.kr\/index.php?rest_route=\/wp\/v2\/posts\/1217\/revisions\/1221"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/www.igoni.kr\/index.php?rest_route=\/wp\/v2\/media\/1219"}],"wp:attachment":[{"href":"http:\/\/www.igoni.kr\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1217"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.igoni.kr\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1217"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.igoni.kr\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1217"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}