RBAC model
2 min
RBAC principles
- Least privilege by default
- Read-only initial onboarding mode
- Explicit elevation for execution-enabled workflows
- Namespace scoping where practical
- Separate permissions for analysis vs action
Kubernetes-side RBAC
Document:
- Required API groups/resources for read operations
- Additional permissions required for execution workflows
- Optional privileges by module (upgrades, drift remediation, troubleshooting actions)
Kubegrade app RBAC
Document:
- Owner/Admin/Developer/Viewer permissions
- Scope inheritance (org → workspace → project → cluster)
- Approval authority vs execution authority separation