<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>rbac on ashikov.ru</title><link>https://ashikov.ru/en/tags/rbac/</link><description>Recent content in rbac on ashikov.ru</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Tue, 21 Jul 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://ashikov.ru/en/tags/rbac/index.xml" rel="self" type="application/rss+xml"/><item><title>Why kubectl exec Requires create in RBAC</title><link>https://ashikov.ru/en/notes/kubectl-exec-create-rbac/</link><pubDate>Tue, 21 Jul 2026 00:00:00 +0000</pubDate><guid>https://ashikov.ru/en/notes/kubectl-exec-create-rbac/</guid><description>Why executing a command in an existing Pod is authorized as create on the pods/exec subresource, and what changed after the transition from SPDY to WebSockets.</description></item></channel></rss>