{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,19]],"date-time":"2026-03-19T01:19:08Z","timestamp":1773883148273,"version":"3.50.1"},"reference-count":114,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"3","license":[{"start":{"date-parts":[[2026,3,1]],"date-time":"2026-03-01T00:00:00Z","timestamp":1772323200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,3,1]],"date-time":"2026-03-01T00:00:00Z","timestamp":1772323200000},"content-version":"am","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,3,1]],"date-time":"2026-03-01T00:00:00Z","timestamp":1772323200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,3,1]],"date-time":"2026-03-01T00:00:00Z","timestamp":1772323200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/100000001","name":"U.S. National Science Foundation","doi-asserted-by":"crossref","award":["2310179"],"award-info":[{"award-number":["2310179"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"crossref"}]},{"DOI":"10.13039\/100000001","name":"U.S. National Science Foundation","doi-asserted-by":"crossref","award":["2312321"],"award-info":[{"award-number":["2312321"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"crossref"}]},{"DOI":"10.13039\/100000001","name":"U.S. National Science Foundation","doi-asserted-by":"crossref","award":["CNS-2026928"],"award-info":[{"award-number":["CNS-2026928"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"crossref"}]},{"DOI":"10.13039\/100000001","name":"U.S. National Science Foundation","doi-asserted-by":"crossref","award":["CCF-2349961"],"award-info":[{"award-number":["CCF-2349961"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"crossref"}]},{"DOI":"10.13039\/100000001","name":"U.S. National Science Foundation","doi-asserted-by":"crossref","award":["CCF-2319472"],"award-info":[{"award-number":["CCF-2319472"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"crossref"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IIEEE Trans. Software Eng."],"published-print":{"date-parts":[[2026,3]]},"DOI":"10.1109\/tse.2026.3659785","type":"journal-article","created":{"date-parts":[[2026,2,9]],"date-time":"2026-02-09T21:05:11Z","timestamp":1770671111000},"page":"1125-1144","source":"Crossref","is-referenced-by-count":0,"title":["Configuration Defects in Kubernetes"],"prefix":"10.1109","volume":"52","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-7421-7833","authenticated-orcid":false,"given":"Yue","family":"Zhang","sequence":"first","affiliation":[{"name":"Department of Computer Science and Software Engineering, Auburn University, Auburn, AL, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0000-6785-7242","authenticated-orcid":false,"given":"Uchswas","family":"Paul","sequence":"additional","affiliation":[{"name":"Department of Computer Science, NC State University, Raleigh, NC, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1323-8769","authenticated-orcid":false,"given":"Marcelo","family":"d\u2019Amorim","sequence":"additional","affiliation":[{"name":"Department of Computer Science, NC State University, Raleigh, NC, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5056-757X","authenticated-orcid":false,"given":"Akond","family":"Rahman","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Software Engineering, Auburn University, Auburn, AL, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","article-title":"YAMLlint"},{"key":"ref2","first-page":"71","article-title":"Cloud-ODC: Defect classification and analysis for the cloud","volume-title":"Proc. Int. Conf. Softw. Eng. Res. Pract. (SERP)","author":"Alannsary","year":"2015"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/sp54263.2024.00019"},{"key":"ref4","volume-title":"Helm - Trivy-Server Should Use Trivy.repository:trivy.tag Image If Defined","year":"2022"},{"key":"ref5","article-title":"Dear Linux, privileged ports must die","author":"Aral","year":"2022"},{"key":"ref6","article-title":"Application controller needs a liveness probe","year":"2019"},{"key":"ref7","volume-title":"Core-Install Manifest References Undefined Argocd-Server Serviceaccount","year":"2021"},{"key":"ref8","article-title":"Operator Resour. Should Have Unique Labels","year":"2022"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1080\/1364557032000119616"},{"key":"ref10","article-title":"Vsphere username escaped resulting in failed authentication creating workload cluster","year":"2022"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/3360585"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/DSN58291.2024.00016"},{"key":"ref13","first-page":"1","article-title":"Packaging of Kubernetes applications,\u201d in","volume":"1","author":"Baur","year":"2021","journal-title":"Proc. OMI Seminars (PROMIS)"},{"key":"ref14","article-title":"Policy-as-code","year":"2023"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/EnCyCriS52570.2021.00009"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/3539606"},{"key":"ref17","article-title":"The chart best practices guide","author":"Chart","year":"2024"},{"key":"ref18","article-title":"Checkov","year":"2024"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE43902.2021.00068"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2019.2940179"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/32.177364"},{"key":"ref22","article-title":"Container orchestration","year":"2024"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1177\/001316446002000104"},{"key":"ref24","article-title":"Kubesec","year":"2024"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/3338906.3338916"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/3597503.3639207"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/tse.2020.3007554"},{"key":"ref28","article-title":"Datree","year":"2024"},{"key":"ref29","article-title":"During installation main queue stuck with upmeter module","year":"2023"},{"key":"ref30","article-title":"What is schema validation?","author":"Donato","year":"2023"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/I2CT51068.2021.9418203"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/3611643.3616347"},{"key":"ref33","volume-title":"[Metricbeat] DNS Lookup Failure Node Host","year":"2019"},{"key":"ref34","volume-title":"Static Code Analysis: Top 7 Methods, Pros\/Cons Best Practices","author":"Elbaz","year":"2023"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/3236024.3236030"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/3379597.3387462"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/MSR.2012.6224294"},{"key":"ref38","article-title":"Grafana operator 5.4.1 resource limit too low, grafana-operator-controller-manager pod won\u2019t start[bug]","year":"2023"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/3600006.3613161"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE48619.2023.00024"},{"key":"ref41","volume-title":"Consul Server Statefulset Volume Name Isn\u2019t Truncated","year":"2021"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/3660790"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1145\/3660781"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1145\/3611643.3616325"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1145\/3377811.3380395"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1145\/2480362.2480574"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/ieeestd.1996.81033"},{"key":"ref48","article-title":"Add accessmodes option to helm Grafana chart","year":"2018"},{"key":"ref49","article-title":"Incorrect image tag in published YAML","year":"2021"},{"key":"ref50","article-title":"Kubernetes fail compilation: But they keep getting worse","year":"2024"},{"key":"ref51","article-title":"You Broke Reddit: The Pi-Day Outage","year":"2024"},{"key":"ref52","doi-asserted-by":"crossref","DOI":"10.1016\/j.jss.2021.110935","article-title":"The symptoms, causes, and repairs of bugs inside a deep learning library","volume":"177","author":"Jia","year":"2021","journal-title":"J. Syst. Softw."},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/IWCMC61514.2024.10592468"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/IWCMC61514.2024.10592468"},{"key":"ref55","volume-title":"Fix: adj Indent Extravolumes & Volumemounts in 14-Keda-Deployment","year":"2023"},{"key":"ref56","volume-title":"Kserve Installation Fails with Kubeflow Due to Wrong Cert Injection Namespace Servingruntime Webhook","year":"2023"},{"key":"ref57","article-title":"Kep-2067: Rename the KubeaDM \"master\" label and taint","year":"2022"},{"key":"ref59","article-title":"Kubernetes Documentation","year":"2024"},{"key":"ref60","article-title":"Failed to create listener: bind: permission Denied","year":"2021"},{"key":"ref61","article-title":"Error EBS-CSI-Controller Pod","year":"2022"},{"key":"ref62","volume-title":"[Bug] Clusterrole Kyverno:events Tighten Scope Apigroups","year":"2022"},{"issue":"1","key":"ref63","doi-asserted-by":"crossref","first-page":"159","DOI":"10.2307\/2529310","article-title":"The measurement of observer agreement for categorical data","volume":"33","author":"Landis","year":"1977","journal-title":"Biometrics"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1145\/3660772"},{"key":"ref65","article-title":"The gatekeeper post install job cannot run pod due to PSP insufficient security context","year":"2021"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1145\/2914770.2837617"},{"key":"ref67","article-title":"[bug] backing image resync not work on v1.2.x","year":"2022"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE43902.2021.00051"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1145\/3663530.3665019"},{"key":"ref70","article-title":"What are the primary reasons your organization is using Kubernetes?","year":"2021"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-017-9512-6"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE-SEIP58684.2023.00036"},{"key":"ref73","article-title":"[kube-prometheus-stack] complex config templating in alert manager results into helm warning","year":"2023"},{"key":"ref74","first-page":"231","article-title":"Preventing privilege escalation","volume-title":"Proc. 12th USENIX Secur. Symp. (USENIX Secur.)","author":"Provos","year":"2003"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1145\/3696630.3731618"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1145\/3377811.3380409"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.1145\/3579639"},{"key":"ref78","first-page":"2024","article-title":"Introduction to container orchestration","volume":"22","author":"Patel","year":"2024"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1145\/3551349.3560419"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1145\/3188720"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.4135\/9781036235611"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.1145\/1414004.1414030"},{"key":"ref83","article-title":"U.S. SEC","year":"2024"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.1109\/SecDev45635.2020.00025"},{"key":"ref85","doi-asserted-by":"publisher","DOI":"10.1145\/3696630.3728573"},{"key":"ref86","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE55347.2025.00170"},{"key":"ref87","doi-asserted-by":"publisher","DOI":"10.1109\/cseet66350.2025.00037"},{"key":"ref88","doi-asserted-by":"publisher","DOI":"10.1145\/3468264.3468591"},{"key":"ref89","doi-asserted-by":"publisher","DOI":"10.1109\/ISSRE.2014.25"},{"key":"ref90","doi-asserted-by":"publisher","DOI":"10.1145\/2851613.2851908"},{"key":"ref91","article-title":"What is container orchestration?","year":"2024"},{"key":"ref92","article-title":"Kubelinter documentation","volume-title":"Online, 2024"},{"key":"ref93","first-page":"143","article-title":"Automatic reliability testing for cluster management controllers","volume-title":"Proc. 16th USENIX Symp. Operating Syst. Des. Implementation (OSDI)","author":"Sun","year":"2022"},{"key":"ref94","first-page":"649","article-title":"Anvil: Verifying liveness of cluster management controllers","volume-title":"Proc. 18th USENIX Symp. Operating Syst. Des. Implementation (OSDI)","author":"Sun","year":"2024"},{"key":"ref95","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-013-9258-8"},{"key":"ref96","doi-asserted-by":"publisher","DOI":"10.1109\/MSR.2017.59"},{"key":"ref97","doi-asserted-by":"publisher","DOI":"10.1145\/3468264.3468559"},{"key":"ref98","doi-asserted-by":"publisher","DOI":"10.1145\/3540250.3549170"},{"key":"ref99","doi-asserted-by":"publisher","DOI":"10.1145\/3510003.3510114"},{"key":"ref100","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE48619.2023.00062"},{"key":"ref101","volume-title":"Static Code Analysis: The Complete Guide to Getting Started with SCA","author":"Wickramasinghe","year":"2023"},{"key":"ref102","doi-asserted-by":"publisher","DOI":"10.1109\/CLOUD49709.2020.00052"},{"key":"ref103","doi-asserted-by":"publisher","DOI":"10.1145\/3650212.3680396"},{"key":"ref104","doi-asserted-by":"publisher","DOI":"10.1145\/3660804"},{"key":"ref105","doi-asserted-by":"publisher","DOI":"10.1109\/TPSISA52974.2021.00016"},{"key":"ref106","article-title":"Kubeconform","year":"2024"},{"key":"ref107","doi-asserted-by":"publisher","DOI":"10.1145\/3650212.3680366"},{"key":"ref108","article-title":"Issues with postgres-UI-operator v1.10.0","year":"2023"},{"key":"ref109","article-title":"Kube-score"},{"key":"ref110","doi-asserted-by":"publisher","DOI":"10.1145\/3485517"},{"key":"ref111","article-title":"Con-Shifu docker image","author":"Zhang","year":"2024"},{"key":"ref112","article-title":"Replication package for paper","author":"Zhang","year":"2024"},{"key":"ref113","doi-asserted-by":"crossref","first-page":"192","DOI":"10.1145\/3643991.3645079","article-title":"Does generative AI generate smells related to container orchestration?: An exploratory study with Kubernetes manifests","volume-title":"Proc. 21st Int. Conf. Mining Softw. Repositories","author":"Zhang","year":"2024"},{"key":"ref114","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-024-10606-w"},{"key":"ref115","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2019.02.025"}],"container-title":["IEEE Transactions on Software Engineering"],"original-title":[],"link":[{"URL":"https:\/\/ieeexplore.ieee.org\/ielam\/32\/11440029\/11373907-aam.pdf","content-type":"application\/pdf","content-version":"am","intended-application":"syndication"},{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/32\/11440029\/11373907.pdf?arnumber=11373907","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,3,18]],"date-time":"2026-03-18T19:38:38Z","timestamp":1773862718000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11373907\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,3]]},"references-count":114,"journal-issue":{"issue":"3"},"URL":"https:\/\/doi.org\/10.1109\/tse.2026.3659785","relation":{},"ISSN":["0098-5589","1939-3520","2326-3881"],"issn-type":[{"value":"0098-5589","type":"print"},{"value":"1939-3520","type":"electronic"},{"value":"2326-3881","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,3]]}}}