jwright/bztmon-site
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

blog: 'The most secure credential is the one you never mount' #1

Merged
jwright merged 1 commits from blog/workload-least-privilege into main 2026-06-23 09:20:50 +00:00
Conversation 0 Commits 1 Files Changed 2
+111
jwright commented 2026-06-23 09:20:44 +00:00
Owner
Copy Link
Copy Source

Least-privilege for Kubernetes workloads — own ServiceAccount + no auto-mounted
API token, then non-root + dropped caps, then Pod Security as the enforced floor.
Adds a matching house-style SVG diagram (workload-least-privilege).

Least-privilege for Kubernetes workloads — own ServiceAccount + no auto-mounted API token, then non-root + dropped caps, then Pod Security as the enforced floor. Adds a matching house-style SVG diagram (workload-least-privilege).
jwright added 1 commit 2026-06-23 09:20:45 +00:00
blog: 'The most secure credential is the one you never mount' b18c6589bf 
Least-privilege for Kubernetes workloads — own ServiceAccount + no auto-mounted
API token, then non-root + dropped caps, then Pod Security as the enforced floor.
Adds a matching house-style SVG diagram (workload-least-privilege).
jwright merged commit c5d9da9092 into main 2026-06-23 09:20:50 +00:00
jwright deleted branch blog/workload-least-privilege 2026-06-23 09:20:52 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
jwright (Jonathon Wright)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: jwright/bztmon-site#1
Delete Branch "blog/workload-least-privilege"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?