Kubernetes Security

Stage: Alpha Status: Draft

Use non-root pods, read-only root filesystems where possible, dropped capabilities, restricted Secret access, PVCs for SQLite, NetworkPolicy, and internal Services by default.

Never store the Root CA private key in Kubernetes.