Comment Comment by dcherman You can make the identical argument for the CLI tool. Allow kubectl, deny everything else. parent dcherman 7 months ago