<p>Is there something like the old J2EE Platform Roles but for Kubernetes?  It doesn't have to map 1:1 to these old roles of course, but I would like to have a reference to answer questions like, "The person who runs <code>helm install</code> and is responsible for knowing what all the options do is called _________?" Or, "The person who designs the autoscaling policy is called _______?"  Or even, "The person who is responsible that all of the docker images used in the enterprise have been patched with the latest CVE vulnerability fixes is called ________?"  Is there a standard nomenclature for this sort of thing?  Where is it?</p>

<p>Thanks,</p>

<p>Ed</p>

<p><a href="https://i.stack.imgur.com/t33dS.gif" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/t33dS.gif" alt="J2EE Platform Roles"></a></p>

<p>The closest to this is Kubernetes <a href="https://kubernetes.io/docs/reference/access-authn-authz/rbac/" rel="nofollow noreferrer">RBAC</a>. You can create roles and bind the roles to groups/users/service accounts. You will have to do so heavy lifting in terms of defining the specific roles that suit your organizations and what types of permissions.</p>

<p>If you are looking for an audit trail, you can look at <a href="https://kubernetes.io/docs/tasks/debug-application-cluster/audit/" rel="nofollow noreferrer">Auditing</a>.</p>

<p>Hope it helps!</p>
