How should Kubernetes RBAC and security be implemented for production?

A production-ready approach is to create dedicated service accounts, narrow Roles and RoleBindings, apply Pod Security controls, restrict privileged capabilities, protect secrets, and audit high-risk actions.