Comment by robertlagrant
Comment by robertlagrant 10 months ago
This seems good, but can it also be done via ACLs in vanilla Kubernetes?
Comment by robertlagrant 10 months ago
This seems good, but can it also be done via ACLs in vanilla Kubernetes?
Thanks Robert! Yes, you can achieve this with ACLs in Kubernetes, but it requires setting up multiple Roles and contexts. Even then, you might accidentally switch to a higher-permission Role and accidentally run a risky command, thinking you're in a different cluster or using a low-permission user.
Kubesafe is just an extra safety net to prevent those kind of accidents :)