Has anyone outside of Google implemented something similar in spirit to this for K8s or ECS? What was the threat model you were considering when you built it? Was it worth it?
Disclosure: I work at Google and helped write this whitepaper on Binary Authorization for Borg.
Whitepaper: https://github.com/grafeas/kritis/blob/master/docs/binary-au...