ABC as in Always Be Controlling—yeah I know, I lifted the ABC moniker from the ’92 movie Glengarry Glen Ross’ character Blake —and with that I mean you should not only have RBAC enabled, obviously, but you should always create and use dedicated service accounts for your apps. In the very least for Kubernetes native apps but it doesn’t hurt if you just get into the habit of doing:

$ kubectl create ns myapp

$ kubectl -n myapp create sa thesa

So now you have prepared a dedicated service account thesa in the namespace myapp and I do hope for your own sake that you’re always using dedicated namespaces anyways, right?

Now, if you launch your app, use the dedicated service account thesa for example, like so: