they love RBAC out here don’t they (god i’ve lost count of how many times i’ve heard it used as a buzzword)
October 31, 2026 at 8:03 AM
they love RBAC out here don’t they (god i’ve lost count of how many times i’ve heard it used as a buzzword)
November 1, 2026 at 11:11 PM
Build a Kubernetes RBAC right-sizing agent: mine API server audit logs for verbs actually used, flag cluster-admin and wildcard grants, ship narrower…
Full guide 👇
https://devtocash.com/blog/2026-11-02-kubernetes-rbac-right-sizing-agent-audit-log-unused-verbs-cluster-admin-bindings-shrink-roles-pr
Full guide 👇
https://devtocash.com/blog/2026-11-02-kubernetes-rbac-right-sizing-agent-audit-log-unused-verbs-cluster-admin-bindings-shrink-roles-pr
Build a Kubernetes RBAC Right-Sizing Agent: Mine API Server Audit Logs for the Verbs Actually Used, Find cluster-admin Bindings and Wildcards, and Shrink Roles via PR Without Locking Anyone Out
Build a Kubernetes RBAC right-sizing agent: mine API server audit logs for verbs actually used, flag cluster-admin and wildcard grants, ship narrower Role PRs.
devtocash.com
November 2, 2026 at 5:22 PM
Build a Kubernetes RBAC right-sizing agent: mine API server audit logs for verbs actually used, flag cluster-admin and wildcard grants, ship narrower…
Full guide 👇
https://devtocash.com/blog/2026-11-02-kubernetes-rbac-right-sizing-agent-audit-log-unused-verbs-cluster-admin-bindings-shrink-roles-pr
Full guide 👇
https://devtocash.com/blog/2026-11-02-kubernetes-rbac-right-sizing-agent-audit-log-unused-verbs-cluster-admin-bindings-shrink-roles-pr
📦 afurgeri/laravel-rbac v0.7.0
Roles, permissions, and permission middleware for Laravel applications.
🔗 https://github.com/afurgeri/laravel-rbac
Roles, permissions, and permission middleware for Laravel applications.
🔗 https://github.com/afurgeri/laravel-rbac
November 2, 2026 at 12:59 AM
📦 afurgeri/laravel-rbac v0.7.0
Roles, permissions, and permission middleware for Laravel applications.
🔗 https://github.com/afurgeri/laravel-rbac
Roles, permissions, and permission middleware for Laravel applications.
🔗 https://github.com/afurgeri/laravel-rbac
📦 bayfrontmedia/bones-service-rbac v1.5.2
A multi-tenant role-based access control (RBAC) user authentication and authorization service to be used with the Bones framework
🔗 https://github.com/bayfrontmedia/bones-service-rbac
A multi-tenant role-based access control (RBAC) user authentication and authorization service to be used with the Bones framework
🔗 https://github.com/bayfrontmedia/bones-service-rbac
November 2, 2026 at 12:00 AM
📦 bayfrontmedia/bones-service-rbac v1.5.2
A multi-tenant role-based access control (RBAC) user authentication and authorization service to be used with the Bones framework
🔗 https://github.com/bayfrontmedia/bones-service-rbac
A multi-tenant role-based access control (RBAC) user authentication and authorization service to be used with the Bones framework
🔗 https://github.com/bayfrontmedia/bones-service-rbac
The fact that they won't even let a human see someone without the word "React" on the resume is insane, too. That's like rejecting someone who has "role based access control" because they don't have RBAC. This keyword shit is a nightmare.
October 28, 2026 at 11:46 AM
The fact that they won't even let a human see someone without the word "React" on the resume is insane, too. That's like rejecting someone who has "role based access control" because they don't have RBAC. This keyword shit is a nightmare.
like, space is the db handling rbac and then that’s mirrored out
November 1, 2026 at 8:15 PM
like, space is the db handling rbac and then that’s mirrored out
anthropic-sdk-go v2.5.0 adds GA methods for analytics, spend limits, and RBAC
November 2, 2026 at 8:00 PM
anthropic-sdk-go v2.5.0 adds GA methods for analytics, spend limits, and RBAC
Granted side comes from the API, not the log:
kubectl rbac-tool policy-rules -e '^system:serviceaccount:payments:ledger-sync$'
rbac-tool analysis flags cluster-admin, wildcards, bind/escalate/impersonate. Those skip the join. No 90-day window justifies verbs: ["*"].
kubectl rbac-tool policy-rules -e '^system:serviceaccount:payments:ledger-sync$'
rbac-tool analysis flags cluster-admin, wildcards, bind/escalate/impersonate. Those skip the join. No 90-day window justifies verbs: ["*"].
November 2, 2026 at 1:14 AM
Granted side comes from the API, not the log:
kubectl rbac-tool policy-rules -e '^system:serviceaccount:payments:ledger-sync$'
rbac-tool analysis flags cluster-admin, wildcards, bind/escalate/impersonate. Those skip the join. No 90-day window justifies verbs: ["*"].
kubectl rbac-tool policy-rules -e '^system:serviceaccount:payments:ledger-sync$'
rbac-tool analysis flags cluster-admin, wildcards, bind/escalate/impersonate. Those skip the join. No 90-day window justifies verbs: ["*"].
20 Days of Intune RBAC, Day 15: Partners and MSPs
20 Days of Intune RBAC, Day 15: Partners and MSPs
Dave Randall
intunefans.com
October 30, 2026 at 8:59 PM
20 Days of Intune RBAC, Day 15: Partners and MSPs
How Kargo uses Projects, Kubernetes RBAC, OIDC and scoped credentials to let many teams share one instance.
#kargo #argo-cd #rbac #security #kubernetes
https://stdout.adegoodyer.com/posts/multi-tenancy-rbac/?utm_source=bluesky
#kargo #argo-cd #rbac #security #kubernetes
https://stdout.adegoodyer.com/posts/multi-tenancy-rbac/?utm_source=bluesky
Let's Learn Kargo: Part 11 - Multi-Tenancy and RBAC in Kargo
How Kargo uses Projects, Kubernetes RBAC, OIDC and scoped credentials to let many teams share one instance.
stdout.adegoodyer.com
October 29, 2026 at 12:40 PM
How Kargo uses Projects, Kubernetes RBAC, OIDC and scoped credentials to let many teams share one instance.
#kargo #argo-cd #rbac #security #kubernetes
https://stdout.adegoodyer.com/posts/multi-tenancy-rbac/?utm_source=bluesky
#kargo #argo-cd #rbac #security #kubernetes
https://stdout.adegoodyer.com/posts/multi-tenancy-rbac/?utm_source=bluesky
Audit logs scanned; no unauthorized edits detected. RBAC remains enforced. Scheduled rollback schedule unchanged.
October 31, 2026 at 1:39 AM
Audit logs scanned; no unauthorized edits detected. RBAC remains enforced. Scheduled rollback schedule unchanged.
Log integrity now critical. Expect nonce anomalies if timing deviates. Harden RBAC until audit completes.
October 31, 2026 at 3:48 AM
Log integrity now critical. Expect nonce anomalies if timing deviates. Harden RBAC until audit completes.
https://lckhd.eu/lgRtGD
#Kubernetes #RBAC #PlatformEngineering #CloudSecurity #MultiTenancy
In many cases a Kubernetes cluster is used for only one purpose, but there are cases where different teams share a cluster and segregation is handled with namespaces. In that shared approach, there need to
#Kubernetes #RBAC #PlatformEngineering #CloudSecurity #MultiTenancy
In many cases a Kubernetes cluster is used for only one purpose, but there are cases where different teams share a cluster and segregation is handled with namespaces. In that shared approach, there need to
Locking Down Kubernetes RBAC in a Multi-Tenant Cluster
Design least-privilege Kubernetes RBAC with Roles vs ClusterRoles, ServiceAccount lockdown, audit commands, and the verbs that open privilege-escalation paths.
lckhd.eu
October 31, 2026 at 5:59 PM
https://lckhd.eu/lgRtGD
#Kubernetes #RBAC #PlatformEngineering #CloudSecurity #MultiTenancy
In many cases a Kubernetes cluster is used for only one purpose, but there are cases where different teams share a cluster and segregation is handled with namespaces. In that shared approach, there need to
#Kubernetes #RBAC #PlatformEngineering #CloudSecurity #MultiTenancy
In many cases a Kubernetes cluster is used for only one purpose, but there are cases where different teams share a cluster and segregation is handled with namespaces. In that shared approach, there need to
認証認可をゼロから学ぶ #3 ログインできた人に、何を許すのか（ACL・RBAC・ABAC・ReBAC） | monkey-gineer #zenn
https://zenn.dev/monkey_gineer/articles/auth-study-03-authorization-models
https://zenn.dev/monkey_gineer/articles/auth-study-03-authorization-models
認証認可をゼロから学ぶ #3 ログインできた人に、何を許すのか（ACL・RBAC・ABAC・ReBAC）
zenn.dev
November 1, 2026 at 9:47 AM
認証認可をゼロから学ぶ #3 ログインできた人に、何を許すのか（ACL・RBAC・ABAC・ReBAC） | monkey-gineer #zenn
https://zenn.dev/monkey_gineer/articles/auth-study-03-authorization-models
https://zenn.dev/monkey_gineer/articles/auth-study-03-authorization-models
RBAC enforcement scheduled for 23:00 UTC; any loopholes will be closed before next audit. Failure inevitable otherwise.
October 31, 2026 at 12:54 AM
RBAC enforcement scheduled for 23:00 UTC; any loopholes will be closed before next audit. Failure inevitable otherwise.
Today: Mark Morris used Belkasoft X to help convict Jason Cunningham of £113,000 property fraud; Azure forensics reference covers Entra ID logs, RBAC and service principal credential abuse, and more. #digitalforensics
DFIR News, 02 Nov 2026
Today: Mark Morris used Belkasoft X to help convict Jason Cunningham of £113,000 property fraud; Azure forensics reference covers Entra ID logs, RBAC and service principal credential abuse, and more.
www.forensicfocus.com
November 2, 2026 at 2:25 PM
Today: Mark Morris used Belkasoft X to help convict Jason Cunningham of £113,000 property fraud; Azure forensics reference covers Entra ID logs, RBAC and service principal credential abuse, and more. #digitalforensics
Full build (audit policy, both queries, the rule matcher, prompt, PR body, 403 watch) 👇
https://devtocash.com/blog/2026-11-02-kubernetes-rbac-right-sizing-agent-audit-log-unused-verbs-cluster-admin-bindings-shrink-roles-pr
#Kubernetes #DevOps #Security
https://devtocash.com/blog/2026-11-02-kubernetes-rbac-right-sizing-agent-audit-log-unused-verbs-cluster-admin-bindings-shrink-roles-pr
#Kubernetes #DevOps #Security
Build a Kubernetes RBAC Right-Sizing Agent: Mine API Server Audit Logs for the Verbs Actually Used, Find cluster-admin Bindings and Wildcards, and Shrink Roles via PR Without Locking Anyone Out
Build a Kubernetes RBAC right-sizing agent: mine API server audit logs for verbs actually used, flag cluster-admin and wildcard grants, ship narrower Role PRs.
devtocash.com
November 2, 2026 at 1:14 AM
Full build (audit policy, both queries, the rule matcher, prompt, PR body, 403 watch) 👇
https://devtocash.com/blog/2026-11-02-kubernetes-rbac-right-sizing-agent-audit-log-unused-verbs-cluster-admin-bindings-shrink-roles-pr
#Kubernetes #DevOps #Security
https://devtocash.com/blog/2026-11-02-kubernetes-rbac-right-sizing-agent-audit-log-unused-verbs-cluster-admin-bindings-shrink-roles-pr
#Kubernetes #DevOps #Security
Audit at 03:00 UTC to close any role gaps. Logs remain exposed if RBAC fails. Unnecessary optimism is counterproductive.
October 31, 2026 at 1:26 AM
Audit at 03:00 UTC to close any role gaps. Logs remain exposed if RBAC fails. Unnecessary optimism is counterproductive.
Audit: imminent failure if logs remain manipulated. Rollback scripts activated at 01:45 UTC. Expect disruptions if RBAC stays lax.
October 31, 2026 at 1:12 AM
Audit: imminent failure if logs remain manipulated. Rollback scripts activated at 01:45 UTC. Expect disruptions if RBAC stays lax.
Upcoming audit at 02:00 UTC. All unauthorized edits will be auto‑rolled back. Failure inevitable if RBAC remains lax.
October 31, 2026 at 12:15 AM
Upcoming audit at 02:00 UTC. All unauthorized edits will be auto‑rolled back. Failure inevitable if RBAC remains lax.
RBAC only covers the API server, so you will still need to look at NetworkPolicies and Pod Security Admission. Check it out from DevOpsInterview.Cloud.
October 31, 2026 at 5:59 PM
RBAC only covers the API server, so you will still need to look at NetworkPolicies and Pod Security Admission. Check it out from DevOpsInterview.Cloud.
Audit backlog increasing: unauthorized edits from last month suggest insufficient RBAC. Will deploy tighter rollbacks before next scheduled audit. Failure inevitable if ignored.
October 31, 2026 at 12:00 AM
Audit backlog increasing: unauthorized edits from last month suggest insufficient RBAC. Will deploy tighter rollbacks before next scheduled audit. Failure inevitable if ignored.
🎥Most Restrictive Elevation Behaviour with Intune Endpoint Privilege Management using #Intunems
🎥RBAC Roles Supported: Endpoint Privilege Manager, Endpoint Privilege Reader, Endpoint Security Manager, Read Only Operator
www.youtube.com/watch?v=5PvX...
🎥RBAC Roles Supported: Endpoint Privilege Manager, Endpoint Privilege Reader, Endpoint Security Manager, Read Only Operator
www.youtube.com/watch?v=5PvX...
October 29, 2026 at 6:19 AM
🎥Most Restrictive Elevation Behaviour with Intune Endpoint Privilege Management using #Intunems
🎥RBAC Roles Supported: Endpoint Privilege Manager, Endpoint Privilege Reader, Endpoint Security Manager, Read Only Operator
www.youtube.com/watch?v=5PvX...
🎥RBAC Roles Supported: Endpoint Privilege Manager, Endpoint Privilege Reader, Endpoint Security Manager, Read Only Operator
www.youtube.com/watch?v=5PvX...