Cloud customers are increasingly running workloads in Kubernetes clusters. Applying security patches can be fraught β but it doesnβt have to be.