InsideA ClusterRole Is a Role That Forgot Its Namespace
Topic 10 of my Kubernetes journey: cluster-scoped vs namespaced resources, ClusterRoles and ClusterRoleBindings, and how loose bindings get abused.
Topic 10 of my Kubernetes journey: cluster-scoped vs namespaced resources, ClusterRoles and ClusterRoleBindings, and how loose bindings get abused.
Topic 8 of my Kubernetes journey: what a kubeconfig file really is, how clusters, users and contexts fit together, and how the Kubernetes API is grouped.
Topic 6 of my Kubernetes journey: the core security primitives, how the API server authenticates you, and why service account tokens changed in 1.22 and 1.24.
Topic 9 of my Kubernetes journey: the authorization modes (Node, ABAC, RBAC, Webhook), how the API server chains them, and a hands-on RBAC walkthrough.
The complete Kubernetes security journey mapped end to end: 42 topics from RBAC to runtime, organised by the attacker's path and by defence, with the pentest notes.