The principle of least privilege dictates that we should allow components of the Kubernetes system to have access to just the resources and data they need. No cluster or user should have permission to control or view a part of the system that they do not need for regular function.