• Logo
    Canonical Kubernetes
  • ubuntu.com/kubernetes
  • More resources
    • Forum
    • GitHub
Contents Menu Expand Light mode Dark mode Auto light/dark, in light mode Auto light/dark, in dark mode Skip to content
Canonical Kubernetes
  • Canonical Kubernetes documentation
  • What is Canonical Kubernetes?
  • Deploy from Snap package
    • Overview
    • Tutorials
      • Overview
      • Getting started
      • Basic operations with kubectl
      • Add and remove nodes
    • How-to guides
      • Overview
      • Install
        • ... from a snap
        • ... with a custom bootstrap configuration
        • ... with Multipass
        • ... in LXD
        • ... in air-gapped environments
        • ... in development environments
        • ... with custom worker configuration
        • Uninstall the snap
      • Networking
        • Use default DNS
        • Use default network
        • Use default Ingress
        • Use default load balancer
        • Use default gateway
        • Use an alternative CNI
        • Enable Dual-Stack networking
        • Set up an IPv6-only cluster
        • Configure proxy settings
      • Storage
        • Use default storage
        • Use Ceph storage
        • Use cloud storage
      • Use an external datastore
      • Security
        • Hardening guide
        • CIS assessment
        • DISA STIG assessment
        • Report a security issue
        • Refresh external certificates
        • Refresh Kubernetes certificates
        • Use intermediate CAs with Vault
      • Manage upgrades
      • Manage images
      • Back up and restore
      • Set up cluster observability
      • Recover a cluster after quorum loss
      • Troubleshooting
      • Get support
      • Set up Enhanced Platform Awareness
      • Contribute
    • Explanation
      • Overview
      • What is Canonical Kubernetes?
      • Choose an installation method
      • Clustering
      • Channels
      • High availability
      • Upgrades
      • Package management with Helm
      • Enhanced Platform Awareness
      • Node roles
      • Ingress
      • Load balancer
      • Security
        • Security overview
        • Certificates
        • CIS hardening
    • Reference
      • Overview
      • Architecture
      • Dqlite database
      • Commands
      • Configuration files
        • Configuration Files
        • Bootstrap configuration file
        • Control plane node join configuration file
        • Worker node join configuration file
        • Refresh certificates configuration file
      • Release notes
        • 1.32
      • Security
      • Cluster certificates and configuration directories
      • Annotations
      • Proxy environment variables
      • Services and ports
      • Troubleshooting
      • Inspection reports
      • Community
  • Deploy with Juju
    • Overview
    • Tutorials
      • Overview
      • Getting started
      • Basic Canonical Kubernetes charm operations
    • How-to guides
      • Overview
      • Install
        • ... from a charm
        • ... in LXD
        • ... with Terraform
        • ... with a custom configuration
        • ... with custom worker configuration
      • Configure the cluster
      • Integrate with OpenStack
      • Integrate with etcd
      • Integrate with ceph-csi
      • Configure proxy settings
      • Upgrade minor version
      • Upgrade patch version
      • Configure a custom registry
      • Troubleshooting
      • Validate the cluster
      • Integrate with COS Lite
      • Contribute
    • Explanation
      • Overview
      • What is Canonical Kubernetes?
      • Choose an installation method
      • Channels
      • Ingress
      • Load balancer
      • Upgrades
      • Security overview of Canonical Kubernetes
    • Reference
      • Overview
      • Architecture
      • Charms
      • Configuration options
      • Actions
      • Availability Zones
      • Ports and services
      • Proxy environment variables
      • Release notes
        • 1.32
      • Troubleshooting
      • Community
  • Deploy with Cluster API
    • Overview
    • Tutorials
      • Overview
      • Getting started
    • How-to guides
      • Overview
      • Provision a Canonical Kubernetes cluster
      • Install custom Canonical Kubernetes
      • Use custom bootstrap configuration
      • Upgrade the Kubernetes version
      • Perform an in-place upgrade
      • Upgrade the providers of a management cluster
      • Refresh workload cluster certificates
      • Use intermediate CAs with Vault
      • Use external etcd
      • Migrate the management cluster
      • Troubleshooting
    • Explanation
      • Overview
      • What is Canonical Kubernetes?
      • Choose an installation method
      • Cluster API - Canonical Kubernetes
      • Ingress
      • Load balancer
      • In-place upgrades
      • Security overview of Canonical Kubernetes
    • Reference
      • Overview
      • Release notes
        • 1.32
      • Annotations
      • Providers configurations
      • Ports and services
      • Providers configurations
      • Community
  • Community
  • Release notes
    • Snap release notes
      • 1.32
    • Charm release notes
      • 1.32
Back to top

Security in Canonical KubernetesΒΆ

Visit our dedicated security explanation pages to learn more in depth about security in Canonical Kubernetes.

  • Security overview
  • Certificates
  • CIS hardening
Copyright © 2025 CC-BY-SA, Canonical Group Ltd
Last updated on Mar 31, 2025
Ask a question on Discourse
Ask a question on Slack
Open a GitHub issue for this page
Edit this page on GitHub
Contents
  • Security in Canonical Kubernetes