Kubernetes Security

The set of practices for securing Kubernetes clusters: network policies, RBAC, Pod Security Standards, image scanning, and runtime monitoring. Kubernetes introduces a complex attack surface with its APIs, secrets, service accounts, and inter-pod communications. Common misconfigurations (overly permissive RBAC, plaintext secrets) expose production data.