6 items with this tag.
The access, identity, workload, and admission controls that keep a cluster from becoming a flat trust zone.
Every meaningful Kubernetes action becomes an API request that must authenticate, authorize, and pass admission.
Service accounts are workload identities. RBAC defines what those identities can do.
Pod security controls the shape of workloads before they run: privilege, host access, users, capabilities, and filesystem behavior.
Admission is the gate between a valid API request and a request the cluster should actually accept.
Secret handling is a full lifecycle: creation, storage, access, rotation, exposure, and deletion.