jwright/bztmon-site
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

blog: 'The most secure credential is the one you never mount' #1

Merged
jwright merged 1 commits from blog/workload-least-privilege into main 2026-06-23 09:20:50 +00:00
Conversation 0 Commits 1 Files Changed 2
+111

1 Commits

Author SHA1 Message Date
jwright b18c6589bf blog: 'The most secure credential is the one you never mount' 
Least-privilege for Kubernetes workloads — own ServiceAccount + no auto-mounted
API token, then non-root + dropped caps, then Pod Security as the enforced floor.
Adds a matching house-style SVG diagram (workload-least-privilege).
 2026-06-23 19:17:03 +10:00