Kubernetes Exposed: One YAML Away from Disaster
A couple years ago I came into a company that had recently switched almost everything to Kubernetes. The company expected the devs to learn how to own and operate the cluster. Most of the devs there couldn&#x27;t care less about anything except how to deploy their code to it (probably rightfully so). But I was shocked to find the k8s api was exposed to the internet and unauthenticated.<p>I brought the problem up with the higher-ups and they were pretty lethargic about it. Moral of the story I guess is if you&#x27;re gonna choose to operate infrastructure like Kubernetes make sure you have experienced people trained to do so and don&#x27;t expect your devs to wear another hat.