One of the largest gaps in a Kubernetes deployment is security. Steven J. Vaughan-Nichols writing at The New Stack shares some intertesting insights.
How bad is it? It’s awfully bad. 94% of respondents stated they have experienced a Kubernetes and container environments security incident in the last 12 months. Worse still, more than half of respondents, 55%, ended up delaying Kubernetes application production developments due to security screw-ups over the last 12 months.
While the focus at times is threats from the outside, we need to look on the inside to ensure we are correctly configuring systems. We need to make Kubernetes security configurations simpler. There must be collaboration between different IT teams.
What’s the root cause of all these failures? It’s not nasty old hackers attacking. Oh no. We’re doing it more often to ourselves. Nearly 60% of those surveyed said human error was the cause of data breaches and failures. In particular, most have experienced a misconfiguration incident within the last 12 months.