12.2. Identifying misconfigurations in Kubernetes roles

Procedure

1. Go to the RHACS portal and click Configuration Management.
2. Select Role-Based Access Control Users and Groups from the header in the Configuration Management view. The Users and Groups view displays a list of Kubernetes users and groups, their assigned roles, and whether the cluster-admin role is enabled for each of them.
3. Select a user or group to view more details about the associated cluster and namespace permissions.

Procedure

1. In the RHACS portal, go to Configuration Management.
2. Select RBAC Visibility and Configuration Service Accounts from the header in the Configuration Management view. The Service Accounts view displays a list of Kubernetes service accounts across your clusters, their assigned roles, whether the cluster-admin role is enabled, and which deployments use them.
3. Select a row or an underlined link to view more details, including which cluster and namespace permissions are granted to the selected service account.

Procedure

1. In the RHACS portal, go to Configuration Management.
2. Select RBAC Visibility and Configuration Roles from the header in the Configuration Management view. The Roles view displays a list of Kubernetes roles across your clusters, the permissions they grant, and where they are used.
3. Select a row or an underlined link to view more details about the role.
4. To find roles not granted to any users, groups, or service accounts, select the Users & Groups column header. Then select the Service Account column header while holding the Shift key. The list shows the roles that are not granted to any users, groups, or service accounts.