What's new for security in Kubernetes 1.28

This article outlines security-focused updates in Kubernetes 1.28, highlighting the beta Validating Admission Policy that uses CEL to enforce admission controls (e.g., blocking privileged containers) and the stable SelfSubjectReview API for users to view their identity attributes. It provides practical steps to enable the feature in kind, verify API resources, create a sample policy and binding to deny privileged pods in the default namespace, and validate outcomes, emphasizing improved built-in options for admission control and access troubleshooting.