Least Privilege & the 12-Factor App

The track’s last board: the habits that make a program safe to run as a disposable herd, and the rule for how small the damage stays when one gets broken into anyway.

Before you start. You need to know what a container is: a program shipped sealed in its own box, so the same box runs the same way everywhere it lands. The Harbor Master (pods, deployments, services) gave you the service account, the ID tag a container shows the cluster when it asks for anything. The cluster is the group of machines that runs the containers, plus the program in charge of them. You’re about to watch a very similar tag get checked, and abused.