All topics
Security
Access control, least privilege and systems that fail closed. 2 posts
- Design
Bounding an Agent’s Authority During Kubernetes Incident Response
Intent classification can choose a specialist, but it cannot grant access. A practical design for routing incident work across clusters while keeping authorization in scoped grants and Kubernetes RBAC.
9 minKubernetesPlatformSecurity - Design
Shell Access That Expires on its Own: Building Just-in-Time kubectl exec
Standing exec permissions in production are a liability. This is the design of a just-in-time replacement (request, approval, namespace lock, broker, scheduled expiry), and the long tail of making expiry recoverable as well as fail-closed: retry semantics, durable notifications, CloudFormation imports and evicted pods.
14 minKubernetesSecurityAWS