<p>Kubernetes <a href="https://kubernetes.io/docs/reference/access-authn-authz/rbac/" rel="nofollow noreferrer">RBAC</a> can be used to give permissions to a subject in a particular Namespace. Can the same be accomplished with Cloud IAM?</p>

dippynark
<p>If I got your point correctly that:</p>

<p>The IAM roles for a GKE kubernetes cluster are very simple, "Admin, Read/Write, Read".
But you need more fine-grained control over the kubernetes cluster.</p>

<p><strong>In this case:</strong></p>

<p>There's a new "Alpha" feature in Google Cloud's IAM which wasn't available previously.</p>

<p><strong>Under IAM > Roles</strong></p>

<p>You can now create custom IAM roles with your own subset of permissions.</p>

<p>You can create a minimal role which allows for example <code>gcloud container clusters get-credentials</code> to work, but nothing else, allowing permissions within the kubernetes cluster to be fully managed by RBAC.</p>

<p>It will allow you to get more fine-grained access configurations for kubernetes cluster.</p>
