{
  "id": "skill-area:kubernetes-rbac-design",
  "_kind": "SkillArea",
  "_file": "domain/products/kradle.yaml",
  "_cluster": "domain",
  "attributes": {
    "displayName": "Kubernetes RBAC Design",
    "description": "Designing and implementing role-based access control in Kubernetes\nclusters. Covers ClusterRoles, Roles, ClusterRoleBindings,\nRoleBindings, aggregated roles, and the interaction between RBAC\nand admission control. Includes least-privilege patterns for\nworkloads, operators, and CI service accounts; multi-tenant RBAC\nwith namespace isolation; and debugging authorization with\nkubectl auth can-i and audit logs. In extended platforms like\nKradle, includes org-scoped RBAC layering on top of native K8s\nRBAC.\n",
    "domains": [
      "domain:platform-engineering",
      "domain:security"
    ],
    "expertiseLevels": [
      "intermediate",
      "expert"
    ]
  },
  "outgoingEdges": [
    {
      "from": "skill-area:kubernetes-rbac-design",
      "to": "domain:platform-engineering",
      "kind": "applies_to",
      "attributes": {
        "confidence": "primary"
      }
    },
    {
      "from": "skill-area:kubernetes-rbac-design",
      "to": "domain:security",
      "kind": "applies_to",
      "attributes": {
        "confidence": "secondary"
      }
    },
    {
      "from": "skill-area:kubernetes-rbac-design",
      "to": "skill-area:platform-engineering",
      "kind": "prerequisite_for_learning",
      "attributes": {
        "strength": "required"
      }
    },
    {
      "from": "skill-area:kubernetes-rbac-design",
      "to": "skill-area:k8s-rbac",
      "kind": "related_to",
      "attributes": {}
    }
  ],
  "incomingEdges": []
}