Back to updates

RBAC - 1

2026 (2)

March (1)

k8s: Securing Production Debugging in Kubernetes

Kubernetes Official Blog

2026-03-18

The post recommends securing production Kubernetes debugging with least-privilege RBAC, short-lived identity-bound credentials, and a just-in-time access gateway instead of shared bastions, cluster-admin access, or long-lived SSH keys. It outlines practical patterns for namespace-scoped roles, group-based bindings, OIDC or client-certificate auth, and gateway-mediated sessions with audit logging and automatic expiration.

February (1)

github: Enterprise-defined custom organization roles are generally available

GitHub

2026-02-24

GitHub now generally makes available enterprise-defined custom organization roles to help enterprises standardize role-based access across multiple organizations.

2025 (2)

October (1)

k8s: 7 Common Kubernetes Pitfalls (and How I Learned to Avoid Them)

Kubernetes Official Blog

2025-10-20

The article outlines seven common Kubernetes pitfalls the author encountered—missing resource requests/limits, inadequate liveness/readiness probes, overreliance on kubectl logs, treating dev and prod identically, leaving stale resources, jumping into advanced networking too early, and weak security/RBAC—and gives pragmatic, experience-based advice to avoid each one.

August (1)

azure: [Launched] Generally Available: Entra ID and RBAC support for GetAccountInfo and other supplemental APIs for Azure Storage

Azure Updates

2025-08-26

Entra ID and RBAC support for several Azure Storage supplemental APIs, including GetAccountInfo and ACL management for containers, queues, and tables, is now generally available.