How should Kubernetes RBAC and security be implemented for production?

Create dedicated service accounts, narrow Roles and RoleBindings, apply Pod Security controls, restrict privileged capabilities, protect secrets, and audit high-risk actions.