Container and Kubernetes Security Assessment — 日本企業向けガイド

Containerised environments introduce security considerations at multiple layers. Container image security evaluates base images, vulnerability scanning, embedded secrets, and minimal-image practices. Kubernetes cluster security evaluates API server authentication, RBAC configuration, pod security standards, network policies, etcd encryption, admission controllers, and secrets management. Runtime security evaluates container privileges, capability management, read-only filesystems, and resource limits. The most common critical finding: containers running as root with excessive capabilities, effectively negating the isolation that containers provide.