Most kubernetes validation issues stem from how Kubernetes was deployed (with KUD). So it's important to make sure the CI not only tests ICN blueprint on a kubernetes cluster deployed by KUD (https://gerrit.onap.org/r/c/multicloud/k8s/) but that it freshly deploys KUD based on the latest available code. This way, we can catch newly-introduced vulnerabilities introduced by KUD or test whether KUD patches have improved ICN's security footprint.