This module will provide an overview of the default Kubernetes RBAC configuration for CloudBees CI. We will also explore the provisioning and management of CloudBees CI Managed Controllers in separate Kubernetes namespaces with Kubernetes network policies. Using controller specific Kubernetes namespaces aligns with the best practice of distributing software delivery workload across multiple controllers by providing additional isolation and security. What’s the point of using CloudBees CI RBAC to limit access to individual managed controllers, when a pod based agent used by any of those managed controllers have access complete and total access to all of the managed controller pods?
Kustomize: Kustomize is a CLI that traverses a Kubernetes manifest to add, remove or update configuration options without forking. It is available both as a standalone binary and as a native feature of kubectl.
The labs for this workshop will leverage the Google Cloud Shell tutorial format. Navigate to the cloudbees-ci-k8s-cloudshell-tutorials repository in the GitHub Organization you created for this workshop and click on the OPEN IN GOOGLE CLOUD SHELL button under the Managed Controllers heading.