Kubernetes is a secured system: you first need to be authenticated, as a normal user or as a service account; then, an authorization system validates that you have the rights to perform the requested operations.
Moreover, it is possible to limit the rights of containers on the host system by defining security contexts and limit the rights of containers in the network by defining network policies.
Authentication
Kubernetes defines two kinds of users: normal users and service accounts.