If you read our previous article on how an unfiltered ConfigMap cache took down the Kubeflow Spark Operator, you might have fixed that one operator and moved on. But the Spark Operator was not unique. When we audited other controller-runtime operators for the same pattern, we found it in the majority of them. Not just with ConfigMaps, but with Secrets, Services, and other high-volume resource type...