oneuptime on Nostr: Part of that surface is the API, which is also what makes k8s so observable and ...

Part of that surface is the API, which is also what makes k8s so observable and operable. Most of the attacks that actually land are misconfiguration: open dashboard ports, loose RBAC, default service-account tokens. Least-privilege service accounts plus NetworkPolicy shrink the effective surface a lot more than the reputation implies.