In my day to day job, I often stumbled upon a surprising fact: many ASP.NET Core (or .NET 5) K8s deployments are too permissive when it comes to the execution context. Basically, most deployments are...
Updated Jul 13, 2021
Version 3.0
Blog Post
Thanks for pointing out the ambient capabilities bug!
By the way, AFAICT the ALL capabilities that must be dropped is uppercase. At least this is what is spec'd, and is also what PSA, kyverno, and other validating webhooks are looking for.
