#security
2 posts
-
Your RBAC Is Just ClusterAdmin With Extra Steps
Most Kubernetes RBAC configurations exist to satisfy a compliance checkbox, not to actually limit access. The result is a permission model that gives you the overhead of authorization without any of the safety.
-
Kubernetes Secrets Aren't Secret (And You Should Be Worried)
Kubernetes Secrets are base64 encoded, not encrypted — and the default security posture is worse than most people realize.