27Explain the Kubernetes security basics: the API server, RBAC, service accounts, Pod Security, NetworkPolicy and Secrets.▼mediumNewGoogleAmazonMicrosoft◆ premiumEverything in Kubernetes goes through the API server, so most attacks are about who can talk to it and with what rights. The rest is what a pod can do to its node and to its neighbours.Open full answer →
35How does Kubernetes admission control enforce security policy, and when do you use Pod Security Admission, CEL policies or webhooks?▼hardNewGoogleAmazonMicrosoft◆ premiumRBAC decides who may create a pod; admission decides what kind of pod may exist. The scored answer layers the built-in options, handles webhook failure modes and remembers that the admission path is itself attack surface.Open full answer →