Completed upto lesson 28

2026-08-23 15:29:06 +06:00
parent fb86f0b60a
commit 8e43c00cd6
104 changed files with 1888 additions and 0 deletions
--- a/learning-records/0003-rbac-retrieval-and-boundary-verification.md
+++ b/learning-records/0003-rbac-retrieval-and-boundary-verification.md
@@ -0,0 +1,7 @@
+# RBAC retrieval and boundary verification
+
+The learner wrote the NetworkPolicy and namespace-scoped RBAC solution from memory, without consulting documentation. In the live lab, the `report-reader` ServiceAccount can get and list ConfigMaps but cannot create ConfigMaps or read Secrets, demonstrating correct least-privilege scope and verification discipline.
+
+## Evidence
+
+Live `kubectl auth can-i` results: `yes`, `yes`, `no`, `no` for the required four permissions.