How To Verify You Have the Appropriate RBAC Permissions To Install the RealTheory Collector

Background

RBAC, role-based access control is a method of regulating access to computer or network resources based on the roles of individual users within your organization. To successfully install the RealTheory Collector in your cluster, you must have the appropriate RBAC access; specifically you will need the ability to create a service account, a cluster role, a cluster role binding, and a deployment.

Solution

Verify that RBAC is enabled and that you have the appropriate RBAC permissions to install the RealTheory Collector in your cluster.

Procedure

1. To check if RBAC is enabled, execute the following command:

   kubectl api-versions
   

   If RBAC is enabled, you should see the following API version within the output

   rbac.authorization.k8s.io/v1
   

2. To check whether you can create a service account, execute the following command:

   kubectl auth can-i create serviceaccounts --all-namespaces
   

   If the command responds with yes, you have the required access.

3. To check whether you can create a cluster role, execute the following command:

   kubectl auth can-i create clusterroles --all-namespaces
   

   If the command responds with yes, you have the required access.

4. To check whether you can create a cluster role binding, execute the following command:

   kubectl auth can-i create clusterrolebindings --all-namespaces
   

   If the command responds with yes, you have the required access.

5. To check whether you can create a deployment, execute the following command:

   kubectl auth can-i create deployments --all-namespaces
   

   If the command responds with yes, you have the required access.