Compare commits
2 Commits
03b0cf7c7f
...
9e177dcc41
| Author | SHA1 | Date | |
|---|---|---|---|
| 9e177dcc41 | |||
| 99455d0168 |
Generated
+1387
-54
File diff suppressed because it is too large
Load Diff
+1
-1
@@ -18,7 +18,7 @@
|
||||
"@astrojs/rss": "^4.0.18",
|
||||
"@astrojs/sitemap": "^3.7.3",
|
||||
"@tailwindcss/vite": "^4.3.1",
|
||||
"astro": "^6.4.7",
|
||||
"astro": "^7.0.3",
|
||||
"tailwindcss": "^4.3.1"
|
||||
},
|
||||
"devDependencies": {
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
---
|
||||
title: "The most secure credential is the one you never mount"
|
||||
title: "Every pod holds a key to a door it never opens"
|
||||
date: 2026-06-23
|
||||
summary: "Least privilege for Kubernetes workloads doesn't start with an RBAC role — it starts with revoking the API token every pod silently carries, then layering identity, non-root, and Pod Security on top."
|
||||
tags: ["kubernetes", "security", "least-privilege", "rbac", "service-accounts"]
|
||||
|
||||
@@ -371,8 +371,10 @@ svg {
|
||||
position: absolute;
|
||||
top: 50%;
|
||||
left: 50%;
|
||||
width: 168%;
|
||||
height: 168%;
|
||||
/* Zoomed in — larger than viewport so the board reads big/immersive and the
|
||||
scroll-pan has room to travel. */
|
||||
width: 215%;
|
||||
height: 215%;
|
||||
object-fit: cover;
|
||||
transform: translate(-50%, -50%);
|
||||
will-change: transform;
|
||||
|
||||
Reference in New Issue
Block a user