🔗 Prerequisite: Chapter 06 (Storage) — ✅ you’ve mastered it!

Phase 1: User Authentication

How humans and services prove identity to Kubernetes.

1. steps-for-user-authentication

   → High-level workflow for adding users (certs, tokens, OIDC).

2. user-config-file

   → kubeconfig file for a new user (context, cluster, user).

Phase 2: ServiceAccounts (Pod Identity)

How Pods authenticate to the Kubernetes API.

1. service-account-permissions → Grant permissions to a ServiceAccount (via RoleBinding).

Phase 3: RBAC Policies

Define what users/ServiceAccounts can do.

1. restricted-role

   → Custom Role with limited permissions (e.g., read-only Pods).

2. second-kubernetes-admin

   → Create a cluster-admin-like user (full access, but not system:masters).

🔗 Recommended Learning Flow

1 → 2 → 3 → 4 → 5

✅ Why this order?

• First, authenticate users (how they log in)
• Then, grant permissions (what they can do)
• Finally, test with real scenarios (admin vs restricted)