Part II: Fundamentals of Kubernetes security

### Executive summary This blog post outlines the "four Cs" of Kubernetes security—code, container, cluster, and cloud—covering practical controls such as secret and YAML scanning, container image scanning and signing, host hardening, RBAC and namespace isolation, seccomp, admission controllers, network policies, and continuous patching; it also promotes Expel MDR for Kubernetes as a managed detection and response service that provides 24×7 monitoring, alert triage, MITRE ATT&CK–aligned detections, and remediation guidance to reduce noise and speed time-to-remediation.