---
schema_version: "1"
id: f9188896c43bf01ac3365e96df2fdfb98d3e2c4e58e8ab74bb0f00dfa021a2f9
title: Runtime Fabric Core Software Kubernetes Permissions
collection: mulesoft
version: current
locale: en-us
portal_url: https://docs.salesforce.com/mulesoft/current/en-us/runtime-fabric/latest/rtf-permissions.md
canonical_url: https://docs.mulesoft.com/runtime-fabric/latest/rtf-permissions
source_site: docs.mulesoft.com
content_type: documentation
content_hash: ab77ca616cc773814b441e8ed360ba84a0881da46f9e314f874b35d7b20d02b1
description: MuleSoft Documentation Site
release: "3.0"
latest: true
---
---
product: Runtime Fabric
version: 3.0
is-latest-version: true
---

# Runtime Fabric Core Software Kubernetes Permissions

> For the full documentation index, see: https://docs.mulesoft.com/llms.txt

The following table lists the Kubernetes access permissions required by the Runtime Fabric agent.
These access permissions are part of the Runtime Fabric helm chart and are automatically applied
during the installation or upgrade.

> [!NOTE] You can’t extend or modify any of these core software access permissions. Instead, create
> and apply the `ClusterRole` and `Rolebindings` for the Runtime Fabric Authorized namespaces use
> case. Refer to [Configuring Authorized Namespaces in Runtime Fabric](https://docs.mulesoft.com/runtime-fabric/latest/authorized-namespaces).

<table><colgroup><col> <col> <col> <col></colgroup><thead><tr><th>Namespace</th><th>API Groups</th><th>Kubernetes Resources</th><th>Verbs</th></tr></thead><tbody><tr><td rowspan="10"><div><div><p>&lt;rtf-namespace&gt;</p></div></div></td><td><div><div><p>extensions, apps</p></div></div></td><td><div><div><p>deployments, deployments/scale, daemonsets, replicasets</p></div></div></td><td><div><div><p>*</p></div></div></td></tr><tr><td><div><div><p>“”</p></div></div></td><td><div><div><p>pods, pods/log, pods/portforward, pods/exec, configmaps, secrets, services, namespaces, nodes, serviceaccounts, resourcequotas, events, limitranges</p></div></div></td><td><div><div><p>*</p></div></div></td></tr><tr><td><div><div><p>batch</p></div></div></td><td><div><div><p>jobs, cronjobs</p></div></div></td><td><div><div><p>*</p></div></div></td></tr><tr><td><div><div><p>extensions</p></div></div></td><td><div><div><p>jobs</p></div></div></td><td><div><div><p>*</p></div></div></td></tr><tr><td><div><div><p>networking.k8s.io</p></div></div></td><td><div><div><p>networkpolicies</p></div></div></td><td><div><div><p>*</p></div></div></td></tr><tr><td><div><div><p>rbac.authorization.k8s.io</p></div></div></td><td><div><div><p>rolebindings, clusterroles, clusterrolebindings, roles</p></div></div></td><td><div><div><p>*</p></div></div></td></tr><tr><td><div><div><p>extensions,networking.k8s.io</p></div></div></td><td><div><div><p>ingresses,networkpolicies</p></div></div></td><td><div><div><p>*</p></div></div></td></tr><tr><td><div><div><p>rtf.mulesoft.com</p></div></div></td><td><div><div><p>persistencegateways, kubernetestemplates, httproutetemplates, muleapplications, muleapplications/status</p></div></div></td><td><div><div><p>*</p></div></div></td></tr><tr><td><div><div><p>autoscaling</p></div></div></td><td><div><div><p>horizontalpodautoscalers</p></div></div></td><td><div><div><p>*</p></div></div></td></tr><tr><td><div><div><p>high availability</p></div></div></td><td><div><div><p>leases</p></div></div></td><td><div><div><p>*</p></div></div></td></tr></tbody></table>

## See Also

- [Enabling RTFCTL Kubernetes Permissions](https://docs.mulesoft.com/runtime-fabric/latest/rtfctl-permissions)

- [Mule App Deployments Kubernetes Permissions on Runtime Fabric](https://docs.mulesoft.com/runtime-fabric/latest/rtf-mule-app-permissions)