Security / Security Model

Security model and trust assumptions

Threat model, security profiles, and trust material such as root tokens, unseal keys, and bootstrap identities.

Read the threat modelReview production posture

Covers

• understand the security assumptions behind the operator architecture
• understand how Development and Hardened profiles change the supported security posture
• review how bootstrap and unseal trust material is handled
• anchor security review conversations before diving into RBAC or network policy details

Security model routes

1. 01

   Threat model

   Trust boundaries, attacker assumptions, and design mitigations.

   Open
2. 02

   Production posture

   How Development and Hardened differ, and the supported production contract.

   Open
3. 03

   Secrets and trust material

   Review how root tokens, unseal keys, and bootstrap credentials are created, stored, or intentionally avoided.

   Open

Next actions

Open platform controlsKubernetes controls that enforce the trust model.Configure security profilesTask page for setting spec.profile on a cluster.