Glossary: Kubernetes Beyond the Basics

Least privilege

Giving each caller only the access its job needs, so a leaked password or token can do little harm.