Kubernetes RBAC and Authentication

1. RBAC Reference

   Roles, ClusterRoles, RoleBindings and ClusterRoleBindings.

2. RBAC Good Practices

   Least privilege, privilege escalation risks and avoiding wildcards.

3. Authenticating

   Client certificates, tokens, OIDC and service account authentication.

4. Authorization Overview

   Authorization modes and request attributes.

5. Node Authorization

   Restricting kubelet API access.

6. Certificate Signing Requests

   Issuing client and serving certificates.

7. Service Accounts

   Workload identities for in-cluster authentication.

8. Configure Service Accounts for Pods

   Binding service accounts and bound tokens.

9. Authentication Mechanisms Hardening

   Hardening guidance for authn.

10. Kubelet Authentication and Authorization

    Securing the kubelet API.

Each section links to the official page. Titles and summaries by Extra Credit; the docs belong to their authors.