Kubernetes Audit Policy: A Checklist Against Common Blind Spots in Your Rules

Hi everyone! We want to share our experience writing and reviewing a Kubernetes audit policy. A Kubernetes audit policy is one of those things that gets written once during cluster setup and then lives "as is" for years, accumulating exceptions for new components and almost never being reviewed as a whole. At some point it's no longer a security...