How would you answer an interview scenario involving Kubernetes RBAC and security?

For an interview scenario involving Kubernetes RBAC and security, I would first clarify the business goal, scale, constraints, and the failure or quality attribute the interviewer wants to explore. Kubernetes RBAC controls which users and service accounts can perform actions on cluster resources. In this scenario, a microservice only needs to read one ConfigMap in its namespace. Explain how you would grant the minimum required permission. I would then explain the main alternatives and tradeoffs, identify likely failure modes, and describe how I would validate the solution through testing, observability, security controls, and recovery or rollback planning.