Building a Mental Model for Kubernetes Security Research

This article describes a methodology and reusable framework for studying Kubernetes (AKS) security by building a taxonomy-driven mental model and a YAML/Terraform specification to deploy scenario-based clusters and workloads; it explains control/authentication/authorization/admission lenses, shows example specs and FastAPI workload PoCs for exercising identity paths, and argues the approach helps analyze production posture and design experiments for detecting abuse or hardening clusters.