Security

Security documentation

Operator trust model, production posture, platform controls, workload protections, and tenant isolation.

Read the security modelReview platform controls

A production posture includes

• Hardened profile by default
• admission enforcement enabled
• explicit version pinning and staged upgrade validation
• clear workload and tenant trust boundaries

Security layers

1. 01

   Security model

   Threat model, production posture, and the trust material assumptions behind the operator design.

   Open
2. 02

   Platform controls

   RBAC architecture, admission policies, and network boundaries for the control plane.

   Open
3. 03

   Workload protections

   Pod hardening, TLS identity, and supply-chain verification for the deployed service.

   Open
4. 04

   Tenant isolation

   Namespace boundaries, tenancy guarantees, and the limits of the shared-service model.

   Open

Related task pages

Security profilesTask page for configuring spec.profile on a cluster.Tenant onboardingNamespace introduction and governance path in the user guide.