Skip to content

Runtime security

Runtime security focuses on detecting and surfacing suspicious behavior in the cluster.

This page will describe the conceptual model for runtime detection, what kinds of events are monitored, and how this fits together with admission control and network policy to provide defense in depth.

Relevant background material from the previous docs includes:

  • src/content/docs-old/reference/configuration/Runtime Security/overview.md
  • src/content/docs-old/reference/configuration/Runtime Security/alerting.md
  • src/content/docs-old/reference/configuration/Runtime Security/migration.md