Hardening a 3-tier app before Kubernetes: 6 things that were quietly broken

Before moving Deal Aggregator to Kubernetes I audited it the way an attacker would. Public delete endpoints, a ReDoS hole, an unauthenticated database and internal tools on the open internet. Here is what I found and how I fixed each one.