Articles tagged with "rbac"
After running AI agents on Kubernetes, we realized that when something went wrong, the Audit Log alone couldn't tell us who did what, or why. Here's the Audit Policy blind spot and how we fixed agent traceability.
Comparing k3s vs k8s doesn't change the default ServiceAccount automount trap. We cover the privilege-escalation risk in multi-tenant clusters, a real CVE, and a 4-layer defense.
A real-world MCP permission bypass shows why Kubernetes/K3s clusters need disciplined RBAC design and audit-log separation before letting AI agents operate them.
Kubernetes Secrets are only Base64-encoded, not encrypted. Learn how plaintext-equivalent storage in etcd and over-permissioned RBAC lead to real incidents, plus the concrete Secrets management practices you need for production K3s.
Complete guide to deploying and operating Harbor as your private container registry. Covers Trivy integration, RBAC, image replication, Helm deployment, and enterprise security features.