Great talk and a very watchable, if not disarming speaker; I'm not sure however I would have allowed the title of the talk to be "Effective" RBAC, as it's not exactly about "effective" rbac in the sense of rbac, it's about "effective" in the sense of automation, which is definitely not what I thought this talk was going to be about. The first half is simply a nice, gentle breakdown of k8s rbac scopes, effectively; and then the second half is him demoing a tool that builds roles for you. And while it's nice that the roles are naturally hardened as they are all automatically scoped via API call scope (which is great), the talk has *nothing* to do with organizing RBAC to meet various user needs and offers no generalized models for admins trying to role out, well...effective RBAC.
![CNCF [Cloud Native Computing Foundation]](http://yt3.ggpht.com/txe66EjpkDQQlx_4jDV0yA0PPsww0rqQrFhMpDqagLWN2-EUBBO65IuIyy5tEFVmpI4_RRduzXc=s48-c-k-c0x00ffffff-no-rj)
![How Netflix Is Solving Authorization Across Their Cloud [I] - Manish Mehta & Torin Sandall, Netflix](http://i.ytimg.com/vi/R6tUNpRpdnY/mqdefault.jpg)
![Certifik8s: All You Need to Know About Certificates in Kubernetes [I] - Alexander Brand, Apprenda](http://i.ytimg.com/vi/gXz4cq3PKdg/mqdefault.jpg)
This is one of the clearest RBAC explanations I've seen. Thanks.
Dude ... rebuilt my local kube cluster just to test this and it freaking works ... awesome both the talk and audit2rbac ... THANKS !
Great talk!!! Clear and fun to watch. audit2rbac is so awesome. :) Thank you!!!!
Great talk. Very clear, thanks.
Very clear explanation. Thank you sir!
Great presentation!
Wonderful!!
Great talk
Superb.
Thanks
awesome
Nice presentation, can you please post the slides?
good representation, however, please remove distorting effect from the representation box. a rectangle is better than a trapezium :)
Great talk and a very watchable, if not disarming speaker; I'm not sure however I would have allowed the title of the talk to be "Effective" RBAC, as it's not exactly about "effective" rbac in the sense of rbac, it's about "effective" in the sense of automation, which is definitely not what I thought this talk was going to be about. The first half is simply a nice, gentle breakdown of k8s rbac scopes, effectively; and then the second half is him demoing a tool that builds roles for you. And while it's nice that the roles are naturally hardened as they are all automatically scoped via API call scope (which is great), the talk has *nothing* to do with organizing RBAC to meet various user needs and offers no generalized models for admins trying to role out, well...effective RBAC.
50 DKP minus for pre recorded demo
Down voters are experts
isbit.mx
slides: github.com/sbueringer/kubecon-slides/blob/master/slides/2017-kubecon-na/Effective%20RBAC%20-%20Jordan%20Liggitt%2C%20Red%20Hat%20-%20Effective%20RBAC.pdf