jwright/bztmon-site
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
d64f528ff741324c4ccd3a844bb47761c3b39296
bztmon-site/public/diagrams/workload-least-privilege.svg
T
jwright b18c6589bf blog: 'The most secure credential is the one you never mount' 
Least-privilege for Kubernetes workloads — own ServiceAccount + no auto-mounted
API token, then non-root + dropped caps, then Pod Security as the enforced floor.
Adds a matching house-style SVG diagram (workload-least-privilege).
2026-06-23 19:17:03 +10:00

4.8 KiB
Raw Blame History

/jwright/bztmon-site/raw/commit/d64f528ff741324c4ccd3a844bb47761c3b39296/public/diagrams/workload-least-privilege.svg
Reference in New Issue View Git Blame Copy Permalink