Cloud native Kubernetes and OpenShift have become the standard for modern cloud-based application development. Organizations are adopting these technologies aggressively, even though many of them have not yet implemented the best practices to operate cloud native systems securely.

In this paper, we will explain the nature and extent of an increasingly prevalent cloud native security problem with a focus on the most common and significant problem that organizations face: the misconfiguration of the digital certificates that protect application workloads in cloud native production environments.