Pod Security

7 pages in this section.

Learn how Pod Security Standards, securityContext, and admission control stack into a defense-in-depth strategy for Kubernetes pods.

Kubernetes Security Pod Security Hardening Explainer

Pod Security Basics

Learn about Kubernetes Pod Security Standards (privileged, baseline, restricted) and how Pod Security Admission enforces them on namespaces.

Kubernetes Security Pod Security Hardening Basics

Why Containers Aren’t a Security Boundary

Understand why containers aren't a security boundary. Learn about shared kernels, namespaces, cgroups, and container escape in Kubernetes.

Kubernetes Security Pod Security Hardening Explainer

securityContext

Harden Kubernetes pods with securityContext. Learn to configure runAsNonRoot, readOnlyRootFilesystem, and drop capabilities for robust security.

Kubernetes Security Pod Security Hardening Guide

seccomp & AppArmor

Kubernetes Security Pod Security Hardening Guide

Pod Security Best Practices

Harden Kubernetes pods in production with this checklist covering admission enforcement, container security context, image supply chain, and network.

Kubernetes Security Pod Security Hardening Best Practices

Pod Security Highlights Summary

A single-page roundup of every highlight bullet from the 6 pages in the Pod Security section, grouped by source page so you can scan all 36 takeaways without opening each article individually.

Highlights Summary Pod Security Hardening

Pod Security

Search Documentation

Pod Security