Azure Kubernetes Service RBAC Writer
Dado verificado em · Fonte
Entradas na definição
39Actions
0NotActions
0DataActions
0Alcance efetivo
piso, não totalControl plane
32Data plane
Sem denominadorNa definição (nativo)
39Piso, não total: expandido contra 17.591 ações de 151 providers colhidas da documentação da Microsoft. A Azure Management API expõe mais — o número real é maior, nunca menor.
O universo de ações mistura control plane e data plane sem marcar qual é qual, então não há denominador contra o qual expandir um wildcard de DataActions. Preferimos deixar em branco a publicar um número inventado.
a7ffa36f-339b-4b5c-8bdf-e2c188b2c0ebGrants access to data stored within services (blobs, queues, secrets, keys) without management plane control.
Descrição
MicrosoftAllows read/write access to most objects in a namespace.This role does not allow viewing or modifying roles or role bindings. However, this role allows accessing Secrets and running Pods as any ServiceAccount in the namespace, so it can be used to gain the API access levels of any ServiceAccount in the namespace. Applying this role at cluster scope will give access across all namespaces.
Role Definition (JSON)
{"Name": "Azure Kubernetes Service RBAC Writer","Id": "a7ffa36f-339b-4b5c-8bdf-e2c188b2c0eb","IsCustom": false,"Description": "Allows read/write access to most objects in a namespace.This role does not allow viewing or modifying roles or role bindings. However, this role allows accessing Secrets and running Pods as any ServiceAccount in the namespace, so it can be used to gain the API access levels of any ServiceAccount in the namespace. Applying this role at cluster scope will give access across all namespaces.","Actions": [],"NotActions": [],"DataActions": [],"NotDataActions": [],"AssignableScopes": ["/"]
Assignable Scopes
PowerShell
Get-AzRoleDefinition -Name "Azure Kubernetes Service RBAC Writer"
Azure CLI
az role definition list --name "Azure Kubernetes Service RBAC Writer"