Needed cluster-admin on EKS 1.28 for red-team simulation. The ValidatingWebhook ‘dry-run’ gap worked flawlessly; RBAC escalation completed in one API call. We also bought the C2 implant add-on—comes with encrypted side-car. Support responded in under 5 min when we hit a JSON encoding issue...