Kubernetes Version 1.22: Security Features You Need to Know

### Executive summary: Kubernetes 1.22 focuses on security improvements while most changes remain in alpha/beta. Key highlights include the new PodSecurity admission controller (alpha) replacing PodSecurityPolicy, the ability to allow unprivileged users to bind low ports via a sysctl, NetworkPolicyEndPort moving to beta (enabling port ranges if the CNI supports it), an alpha node-wide default seccomp profile to strengthen syscall filtering, and alpha support for rootless kubelet and node components to reduce root risk; operators should test these features and verify CNI and production readiness before relying on them.