UDS Core
What is UDS Core?
Section titled “What is UDS Core?”UDS Core is the runtime platform layer of the UDS ecosystem. It gives every application deployed on top of it a consistent, secure, and compliance-ready operating environment—so platform engineers do not have to rebuild those concerns for each project.
UDS Core is the secure foundation your applications run on. It provides shared platform services (identity, networking, logging, monitoring, runtime security, and more) with hardened defaults, and integrates those services automatically with applications that declare their needs through the UDS Package custom resource.
UDS Core is designed for teams operating in demanding environments: airgapped networks, classified enclaves, multi-cluster deployments, and edge systems where internet connectivity cannot be assumed.
Key Capabilities
Section titled “Key Capabilities”Security Posture
Section titled “Security Posture”Security is built into UDS Core by default, not bolted on. The platform provides defense-in-depth across the software supply chain, network, identity, and runtime layers:
- Secure supply chain with per-release CVE scans and SBOMs.
- Airgap-native operation with no runtime external dependencies.
- Zero-trust networking with default-deny network policies and Istio STRICT mTLS.
- Centralized identity and SSO enforced at the mesh edge.
- Admission control that blocks overly permissive workloads before they reach the cluster.
- Runtime detection and alerting for malicious behavior.
- Centralized logging and metrics for audit and incident response.
For the full security overview, see Security →.