Kubernetes Security Matures: Inside the Project’s First Independent Security Audit
The CNCF-funded Kubernetes Security Audit Working Group completed the first formal security audit of Kubernetes, spanning 1.5 million lines of code and producing 37 findings, five rated high severity. Here’s what the audit covered, how it was structured, and what it means for operators.