Kubernetes Service Account Tokens: Retire Legacy Secrets
Kubernetes Pods get short-lived, Pod-bound service account tokens from the TokenRequest API, but Secret-based tokens still never expire and stay valid …
Tag
Least Privilege
Kubernetes RBAC Audit: 11 Permissions That Escalate Access
Some Kubernetes RBAC permissions look harmless but let the holder become someone more powerful: list on Secrets, create on Pods, get on nodes/proxy, …