Ugh, clusterroles with just give blanket permissions to all resources in all namespaces are the new blinkinlights permissions 😠So many upstream devs just take the easy road and take all permissions even when their app does not need it.
#kubernetes #rbac #rbacishard