Ugh, clusterroles with just give blanket permissions to all resources in all namespaces are the new blinkinlights permissions 😠 So many upstream devs just take the easy road and take all permissions even when their app does not need it.

#kubernetes #rbac #rbacishard