Security enhancement features for M-FKE

Managed - FPT Kubernetes Engine (M-FKE) provides several security enhancement features for your clusters.

Available security features:

• Benchmark Security: evaluates Worker Node kubelet configuration against CIS (Center for Internet Security) standards.
• Runtime Security: detects anomalous cluster behavior in real time using Falco, with alerts via Telegram or Gmail.
• Workload Scan: scans container images for vulnerabilities, evaluates RBAC configuration, and generates configuration audit reports using Trivy.
• Audit Log: records every API request and operation sent to kube-apiserver, supporting security analysis and compliance.

note

All security enhancement features are available only after the cluster is successfully created (status: Succeeded/Running).