coulomb/info-tech-canon
2
0
Fork 0
generated from coulomb/repo-seed
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
8e591132f8bf7a044ce85303fe3c800ac55b0fcf
info-tech-canon/infospace/standards/caring/benchmarks/kubernetes-rbac/README.md

1.0 KiB
Raw Blame History

id, title, status, created_by_workplan
id title status created_by_workplan
benchmark/caring/kubernetes-rbac/readme CARING Kubernetes RBAC Benchmark Workspace candidate ITC-WP-0010

CARING Kubernetes RBAC Benchmark

This workspace analyzes Kubernetes RBAC as a CARING benchmark, not as a shortcut profile. It is designed to stress access-governance orthogonality across Access Control, Organization, Governance, Security, Landscape, DevSecOps, Network, Observability, Task, and Tagging.

The benchmark keeps Kubernetes native constructs separate from CARING meaning:

  • Role and ClusterRole are rule bundles or capability profiles, not automatically CARING canonical roles.
  • RoleBinding and ClusterRoleBinding are grants or assignments.
  • ServiceAccount is a service subject and a workload identity anchor.
  • Namespace is a useful scope signal, but it is not automatically a tenant boundary.

Indexed benchmark artifacts:

  • benchmark.yaml
  • native-concepts.yaml
  • caring-mapping.yaml
  • access-descriptors.yaml
  • findings-and-canon-pressure.yaml
Reference in New Issue View Git Blame Copy Permalink