Container and Kubernetes Security
Section focus: Container and Kubernetes Security.
Best use: start with the section map below, then move into the deeper pages that match your role or stack.
Design note: this index was refreshed to act as a cleaner GitBook landing page instead of a plain directory listing.
Start with these pages
| Page | Why open it first |
|---|---|
| 🐳 Dockerfile Security Best Practices | High-value page inside Container and Kubernetes Security. |
| 🐳 Docker Top 10 Misconfigurations | High-value page inside Container and Kubernetes Security. |
| ☸️ Kubernetes Security Baseline | High-value page inside Container and Kubernetes Security. |
| ☸️ Kubernetes Top 10 Misconfigurations | High-value page inside Container and Kubernetes Security. |
| Network Policy Patterns | High-value page inside Container and Kubernetes Security. |
| 👥 Kubernetes RBAC and ABAC | High-value page inside Container and Kubernetes Security. |
| 🔐 Kubernetes API Access Hardening | High-value page inside Container and Kubernetes Security. |
| ☸️ Kubernetes Review Map — CKS Domains and Modern Attack Paths | Best next step when you want a curated review structure and modern attack-path shortlist. |
| 🐙 OPA and Policy Enforcement | High-value page inside Container and Kubernetes Security. |
| ☸️ Container / Kubernetes / Platform Security — Images, Admission, RBAC, Pod Hardening, Isolation, and GitOps / Deployment Plane | High-value page inside Container and Kubernetes Security. |
| 🧱 Container Isolation — seccomp, SELinux, AppArmor, Capabilities, gVisor, and Namespaces | High-value page inside Container and Kubernetes Security. |
| ☸️ Istio / Linkerd mTLS Operations and Certificate Rotation | High-value page for mesh certificate ownership, rotation, and production pitfalls. |
| 📚 Kubernetes Security Glossary and Term Map | Best when the main glossary feels too broad and you need cloud-native terms in one place. |
Related sections
Intro: This section stays centered on the control surfaces that repeatedly shape cloud-native risk: Dockerfile design, pod security, RBAC, network segmentation, policy enforcement, and runtime investigation.
What this page includes
- Docker and Kubernetes baselines
- top misconfigurations
- a CKS-aligned review map translated into real platform control ownership and modern attack paths;
- RBAC / ABAC
- cross-links into new runtime, identity, and attack-chain expansions
☸️ Core pages in this section
- 🐳 Dockerfile Security Best Practices
- 🐳 Docker Top 10 Misconfigurations
- ☸️ Kubernetes Security Baseline
- ☸️ Kubernetes Top 10 Misconfigurations
- Network Policy Patterns
- 👥 Kubernetes RBAC and ABAC
- 🔐 Kubernetes API Access Hardening
- 🐙 OPA and Policy Enforcement
- 🎤 OPA / Gatekeeper Mock Interview Pack
- 🧩 Kyverno Deep Pages
- 🧭 Runtime Investigation Playbook for Kubernetes and Containers
- 🛡️ Trusted Images, Harbor, and Signing
- 🧱 Kubernetes Hardening
- 🧰 Kubernetes Security Tooling Map and Standards
- 🧱 StackRox Kubernetes Security Platform Guide
- 🐳☸️ Implementing DevSecOps with Docker and Kubernetes — Modernization Map
- 🐳 AppArmor and Seccomp for Docker
- 🗂️ Kubernetes Risks and Measures Catalog
- ☸️ Kubernetes Review Map — CKS Domains and Modern Attack Paths
Cross-links
- 🛡️ Security as Policy for Terraform and Infrastructure as Code
- Runner Isolation and Trust Boundaries
- 🚨 Detection and Response
- 🪪 Identity and Platform Access
Snippets
- Runtime Investigation Command Pack
- Namespace PSS labels and Kyverno starter
- StackRox install and CI snippets
- Advanced pod hardening starter
Author attribution: Ivan Piskunov, 2026 - Educational and defensive-engineering use.