[threentaway]

No RBAC doesn't automatically do this. And many publicly available Helm charts are missing these basic security configurations. You should use Gatekeeper or similar to enforce these settings throughout your cluster.

[westurner]

Gatekeeper docs: https://open-policy-agent.github.io/gatekeeper/website/docs/

Gatekeeper src: https://github.com/open-policy-agent/gatekeeper

awesome-container-security: https://github.com/kai5263499/awesome-container-security

"container-security" GitHub label: https://github.com/topics/container-security

[rhizome]

Everyday DevOps strays further from SysAdmin's light.