ops-mason/intakes
tegwick 0a379cc209 MASON-WP-0015-T06: agent kubeconfig is cluster-admin (MASON-IN-0006)
kubectl auth can-i shows system:admin can create ServiceAccount tokens,
pods and impersonate cluster-wide, so any OpenBao Kubernetes role can be
assumed. Recorded as an open intake for founder decision; nothing changed.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 278674@bnt-lap001
Assistant-Session: 64827407-e196-4ce3-b70c-76e7b537493f
2026-10-18 12:56:03 +02:00
..
intakes.md MASON-WP-0015-T06: agent kubeconfig is cluster-admin (MASON-IN-0006) 2026-10-18 12:56:03 +02:00