Multi-team platform, mission 3 of 5
Look, don't touch
intermediate, about 8 minutes, in the Kubernetes Simulator
Start mission
Opens once you pass A key for the robot.
The briefing
alice joins the on-call rota. She needs to see what runs in both team namespaces — pods, deployments, events — without being able to change anything, or to read the payment keys.
You don't need to write a Role for this. Kubernetes ships ClusterRoles for the common cases: view (read everything but Secrets), edit, admin. A RoleBinding in a namespace can grant a ClusterRole there, and only there.
What you'll do
- alice can list pods and deployments in checkout and search
- …but can't read secrets or change anything
- Bonus star: Try it as alice: kubectl get pods --as=alice
The mission checks the cluster, not your keystrokes: any fix that works, passes.
More Multi-team platform missions
- 1. A room each
- 2. A key for the robot
- 3. Look, don't touch
- 4. Fair share
- 5. No room to roll