Kubernetes v1.36 Made Me Rethink How We Authorize Kubelet Access
I was debugging a monitoring issue at 2 AM last week when it hit me: we'd granted our observability stack permissions that were way too broad on the kubelet API. The permission model was essentially "here, have access to everything kubelet-related" because we needed visibility in...