Part I: Fundamentals of Kubernetes security

This part-one blog post introduces Kubernetes, outlines its core architecture (cluster, master node, API server, kubelet, pods, container runtime, etcd), and surveys common attack vectors and security challenges. It emphasizes that Kubernetes’ dynamic, ephemeral workloads, complex interdependencies, unrestricted default communication, and default configurations lead to large volumes of alerts and false positives, complicating monitoring and incident response; part two will cover remediation approaches (the four Cs) and how Expel MDR can help.