A Kubernetes manifest is a YAML configuration document that declares application resources and their desired operating configuration. It can configure nearly every aspect of how an application runs, so insecure settings can undermine an otherwise secure container or cluster. section 3.2
Secure deployment work divides responsibilities:
- Developers write deployment manifests that follow Kubernetes security best practices and package applications securely. section 3.2 section 3.4
- Platform engineering teams provide and secure the Kubernetes cluster; cluster deployment and management remain a separate responsibility. section 3.2
Practical security check
Before deploying an application, review its YAML deployment manifest alongside its container image: both must follow security best practices for secure Kubernetes operation. section 3.2
