Great talk and a very watchable, if not disarming speaker; I'm not sure however I would have allowed the title of the talk to be "Effective" RBAC, as it's not exactly about "effective" rbac in the sense of rbac, it's about "effective" in the sense of automation, which is definitely not what I thought this talk was going to be about. The first half is simply a nice, gentle breakdown of k8s rbac scopes, effectively; and then the second half is him demoing a tool that builds roles for you. And while it's nice that the roles are naturally hardened as they are all automatically scoped via API call scope (which is great), the talk has *nothing* to do with organizing RBAC to meet various user needs and offers no generalized models for admins trying to role out, well...effective RBAC.
![CNCF [Cloud Native Computing Foundation]](http://yt3.ggpht.com/txe66EjpkDQQlx_4jDV0yA0PPsww0rqQrFhMpDqagLWN2-EUBBO65IuIyy5tEFVmpI4_RRduzXc=s48-c-k-c0x00ffffff-no-rj)
![Vault and Secret Management in Kubernetes [I] - Armon Dadgar, HashiCorp](http://i.ytimg.com/vi/FhUJYwM_xy0/mqdefault.jpg)
![Vault and Secret Management in Kubernetes [I] - Armon Dadgar, HashiCorp](/img/tr.png)
![How Netflix Is Solving Authorization Across Their Cloud [I] - Manish Mehta & Torin Sandall, Netflix](http://i.ytimg.com/vi/R6tUNpRpdnY/mqdefault.jpg)
This is one of the clearest RBAC explanations I've seen. Thanks.
Dude ... rebuilt my local kube cluster just to test this and it freaking works ... awesome both the talk and audit2rbac ... THANKS !
Great talk!!! Clear and fun to watch. audit2rbac is so awesome. :) Thank you!!!!
Great talk. Very clear, thanks.
good representation, however, please remove distorting effect from the representation box. a rectangle is better than a trapezium :)
Nice presentation, can you please post the slides?
Great talk and a very watchable, if not disarming speaker; I'm not sure however I would have allowed the title of the talk to be "Effective" RBAC, as it's not exactly about "effective" rbac in the sense of rbac, it's about "effective" in the sense of automation, which is definitely not what I thought this talk was going to be about. The first half is simply a nice, gentle breakdown of k8s rbac scopes, effectively; and then the second half is him demoing a tool that builds roles for you. And while it's nice that the roles are naturally hardened as they are all automatically scoped via API call scope (which is great), the talk has *nothing* to do with organizing RBAC to meet various user needs and offers no generalized models for admins trying to role out, well...effective RBAC.
Very clear explanation. Thank you sir!
Great presentation!
Wonderful!!
Superb.
Great talk
Thanks
awesome
50 DKP minus for pre recorded demo
Down voters are experts
isbit.mx
slides: github.com/sbueringer/kubecon-slides/blob/master/slides/2017-kubecon-na/Effective%20RBAC%20-%20Jordan%20Liggitt%2C%20Red%20Hat%20-%20Effective%20RBAC.pdf