Tag: #RBAC
Kubernetes, DevOps and MLOps, written from things we ran and measured ourselves · 1 posts
Until Student VMs Are Up 6: Isolation — Why root inside the guest cannot touch the cluster
Students are real root inside their VMs. We layer defenses to prevent that root from reaching other students' VMs, cluster APIs, the internal network, and the shared golden disk. The layers include: a policy that blocks
2026-10-15 · 15 min read #쿠버네티스#KubeVirt#보안#네트워크 정책#RBAC