@michabbb@social.vivaldi.net2026-06-09 08:43:34
βΈοΈ Kubernetes β k8s.verb / resource / namespace / name. Deny delete secrets, allow get pods only in dev.
π HTTPS β match on http.method, path, headers & body_json. The body is parsed once for JSON endpoints, so you match on payload fields, not just shape.
π Human-in-the-loop approvals for risky actions β defer kubectl apply -f production to a #Slack approval before the request leβ¦
