Kubernetes Security

1. Security Overview

   Kubernetes security concepts overview.

2. Cloud Native Security

   The 4Cs: cloud, cluster, container and code.

3. Security Checklist

   Baseline checklist for cluster security.

4. Controlling Access to the API

   Authentication, authorization and admission stages.

5. Service Accounts

   Workload identities and token projection.

6. API Server Bypass Risks

   Kubelet, etcd and proxy paths that bypass API controls.

7. Linux Kernel Security Constraints

   Seccomp, AppArmor, SELinux and capabilities.

8. Multi-tenancy

   Tenant isolation models.

9. Admission Controllers

   Built-in admission plugins.

10. ValidatingAdmissionPolicy

    CEL-based in-tree policy enforcement.

11. Encrypting Data at Rest

    Encrypting API data in etcd.

12. Auditing

    Kubernetes audit policy and backends.

Each section links to the official page. Titles and summaries by Extra Credit; the docs belong to their authors.