Radar's In-Cluster Architecture: Outbound-Only, Scoped, Live by Default

How Radar's in-cluster install works: outbound-only TLS, read-only RBAC by default, ~32MB RSS. The five questions every platform team asks, answered.