10 years after its release, Kubernetes has become the pre-eminent way of orchestrating and managing containerized applications, with millions of clusters deployed across a wide variety of industries. This talk will look at its security architecture, talk about some of the surprising security choices made by the project, their consequences for security teams, and how we can fix (some) of them.