[{"data":1,"prerenderedAt":16},["ShallowReactive",2],{"blog-tag-en-serviceaccount":3},[4],{"path":5,"title":6,"description":7,"date":8,"tags":9},"\u002Fblog\u002Fen\u002Fk3s-k8s-default-serviceaccount-automount-rbac-multi-tenant","K3s and Kubernetes Share the Same Default ServiceAccount Trap. What Happens When You Leave Automount Enabled in a Multi-Tenant Cluster","Comparing k3s vs k8s doesn't change the default ServiceAccount automount trap. We cover the privilege-escalation risk in multi-tenant clusters, a real CVE, and a 4-layer defense.","2026-10-23",[10,11,12,13,14,15],"k3s","kubernetes","rbac","serviceaccount","multi-tenancy","security",1792736138070]