ReBAC with Kyverno: Automating Multi-Tenant RBAC at Scale - Pavan Madduri, W.W.Grainger.Inc

This talk demonstrates how Grainger replaced manual Kubernetes RBAC provisioning with an automated ReBAC system using Kyverno generate policies. The presenter shows how six ClusterPolicies automatically create tiered Roles (operator, contributor, viewer) and RoleBindings when namespaces are created, eliminating manual YAML and tickets. Platform engineers and Kubernetes administrators at scale will learn a reusable pattern for self-service namespace access without cluster-admin dependencies.