Securing K8s: Why RBAC Is Not Enough 

The challenge with the Kubernetes intent-based API comes when you want to secure and safeguard the API — when you want to control which people can do what using that API. Kubernetes Admission Controllers, give you the needed expressiveness to overcome new access challenges with the granularity needed to be truly effective.