Question

A platform engineer needs to grant a developer permission to list and get Pods, but only within the 'payments' namespace. The engineer creates a Role that allows these verbs on pods, then must bind it to the developer's user. Which resource correctly grants the developer these permissions restricted to the 'payments' namespace?

Accepted Answer

A RoleBinding in the 'payments' namespace that references the Role and the developer as a subject

Answer

A ClusterRoleBinding that references the Role and the developer as a subject

Answer

A ClusterRole in the 'payments' namespace referencing the developer directly

Answer

A RoleBinding in the 'default' namespace that references the Role and the developer as a subject