<p>Kubernetes offers incredible power for scaling applications, but its complexity creates significant security challenges. How can engineering teams navigate this minefield and implement effective safeguards? This episode dives deep into a fascinating research paper that systematically gathers real-world Kubernetes security practices, not from textbooks, but from the collective wisdom found in blog posts, talks, and tutorials online – the &quot;grey literature.&quot;</p><p>We explore the findings from &quot;XI Commandments of Kubernetes Security: A Systematization of Knowledge Related to Kubernetes Security Practices&quot; by researchers from Tennessee Technological University. Learn about their unique methodology for analyzing internet artifacts and discover the resulting &quot;XI Commandments&quot; – a prioritized list of crucial security measures like configuring RBAC, implementing Network Policies, scanning images, and the often-overlooked need to properly secure etcd and Kubernetes Secrets. Understand why default settings aren&#39;t enough and gain actionable insights grounded in the practical experiences of engineers in the trenches.</p><p><br></p><p>Read the original paper: <a href="http://arxiv.org/abs/2006.15275v1" target="_blank" rel="ugc noopener noreferrer">http://arxiv.org/abs/2006.15275v1</a></p><p><br></p><p>Music: &quot;A Difficult Subject&quot; by The Insider</p>