Kubernetes Security Explained: RBAC, ServiceAccounts & NetworkPolicy (Live Demo)

A complete, hands-on look at Kubernetes security — RBAC, ServiceAccounts, and NetworkPolicy — deployed live, with real proof of exactly what a least-privilege identity can and can't do. 🔹 What you'll learn: How every Kubernetes request is processed: Authentication → Authorization → Admission Control RBAC fundamentals — Role, ClusterRole, RoleBinding, ClusterRoleBinding, ServiceAccount, User/Group Building a real, minimum-permission identity for a Pod from scratch Proving exact permissions live with kubectl auth can-i — no guesswork ServiceAccounts in depth, including the "default" ServiceAccount risk most people don't know about NetworkPolicy — Ingress vs Egress, default-deny, and allowing only specific traffic 🛠️ Setup used: Docker Desktop with Kubernetes enabled + kubectl — all local, so you can follow along for free. ⚠️ Note: Docker Desktop doesn't enforce NetworkPolicy by default (no CNI like Calico) — explained in the video. 📋 command reference: pinned comment below. If this is helping you follow along on your own cluster, subscribe to LogicAndLoops — next up: Scaling in Kubernetes (HPA, VPA, Cluster Autoscaler & KEDA). #Kubernetes #DevOps #RBAC #KubernetesSecurity #NetworkPolicy #k8s #CloudNative