Multi-Tenant Kubernetes is straight up difficult to do well, especially where you're talking hard multi-tenancy for external customers. There was a good report

Multi-Tenant Kubernetes is straight up difficult to do well, especially where you're talking hard multi-tenancy for external customers. There was a good report that covered a lot of the risks and mitigations here https://raw.githubusercontent.com/salesforce/kubernetes-control-plane-assessment/master/Atredis%20Partners-Salesforce-Kubernetes%20Control%20Plane%20Vulnerability%20Assessment-v1.1.pdf https://raw.githubusercontent.com/salesforce/kubernetes-cont... But even then that had limited scope and didn't cover things like networking.