K3s and Kubernetes Share the Same Default ServiceAccount Trap. What Happens When You Leave Automount Enabled in a Multi-Tenant Cluster
Comparing k3s vs k8s doesn't change the default ServiceAccount automount trap. We cover the privilege-escalation risk in multi-tenant clusters, a real CVE, and a 4-layer defense.