9 docs tagged with "Kubernetes"

Binary and auditable checklist to assess the practical adoption of the practices prescribed in Chapter 09 - Containers and Images

Canonical catalogue of security requirements for containers and images (CNT-001 to CNT-012), with applicability by risk level and acceptance criteria for the selection of base images, hardening, signing, scanning, runtime policies and access to registries.

Principles, practices and controls for building, validating and running images in a secure, auditable and traceable way

Technical and operational indicators for the assessment of the effectiveness of security controls in container images and orchestration environments, with thresholds by risk level and mapping to the cross-cutting SbD-ToE governance dimensions.

Organisational policies required to guarantee the security, traceability and governance of containers and images throughout the lifecycle.

Why this chapter is exceptional, which sources support the IaC requirements catalogue and how to create/adapt the organisational catalogue

Organisational policy that defines the security requirements for the building, scanning, signing, runtime configuration and management of container images, including securityContext hardening, admission policies in Kubernetes, network isolation and runtime monitoring, proportional to the criticality level (L1, L2, L3).

Effective application and verification of security, isolation and control practices for containerised workloads

Automatic application of formal policies to block non-compliant executions, without replacing human decision