////
Purpose
-------
Information about security.

////

[id="security_{context}"]
= Security

{cust} uses ACS 

== Identity and Access Management

user roles following POLP + max 2 admins per project

keycloak

RBAC tool

== Secrets Management

Sealed secrets

== PKI

== Base images

Based on UBI, added certificates, tracing agents. specialised images including java, quarkus, jboss tooling

built and pushed to nexus automatically each month

== Compliance
{cust} standard is tailored CIS benchmarks

financial audit reports generated based on k8s api