Unverified50% confidenceFactExact time
A cluster-admin token can perform arbitrary operations on all resources in all namespaces within the cluster, including reading Secrets, creating Pods, and modifying RBAC policies.
1
Sources
50%
Confidence
Long-term
Relevance
10/27/2026
First Seen
Sources
Related Entities
Related Claims
Unverified中转站的令牌分组机制基于RBAC（基于角色的访问控制）的API权限管理，每个令牌在创建时被绑定到特定的模型分组70% similarUnverifiedA cluster-admin token is one of the highest-privilege credential types in container orchestration systems such as Kubernetes, and is typically bound to the cluster-admin ClusterRole.66% similarUnverifiedThe project implements enterprise-grade role-based access control (RBAC) with field-level restrictions, defining roles such as analyst, administrator, manager, and employee, with data masking applied for different roles.64% similarUnverifiedNamespaces govern "what you can see" (PID, mount, network, user and other isolation), while cgroups govern "how much you use" (metering and limiting CPU, memory, IO and other resources).64% similarUnverifiedThe system implements role-based access control (RBAC): the owner can see all menus and features, while cashiers can only access sales-related interfaces and cannot touch sensitive modules such as inventory management and supplier settings.63% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1104277API
curl https://kongchang.com/api/v1/knowledge/claims/1104277MCP
get_claim(id=1104277)