Kubernetes Workload Security Validation Dataset

#Manifest code understanding #Security configuration validation #Violation reason identification #Compliance result classification #Kubernetes security audit #Cloud-native configuration review #Container deployment compliance #Workload risk analysis

3120
0.3GB
JSON
CATL
MOBIUSI INC

Updated:2026-11-04

AI Analysis & Value Prop

Covers YAML manifest source code and associated security validation results for Kubernetes workloads such as Deployments, Pods, and Jobs, with key details including resource kind, namespace, container count, and image references. The data highlights security attributes such as privileged containers, host resource access, Linux capabilities, Seccomp, runtime users, and root filesystem settings to support assessment against secure deployment requirements. It is suitable for cloud-native code understanding, configuration compliance validation, risk identification, and training or evaluating security detection models.

Dataset Insights

Sample Examples

{}

Technical Specifications

Field	Type	Description
file_name	string	File name
namespace	string	The Kubernetes namespace for the workload. If not explicitly configured, this field records the default namespace or that no namespace was configured.
api_version	string	The Kubernetes API version declared in the workload manifest.
run_as_user	string	The runtime user ID parsed from runAsUser or the container security context. Records that no value is configured when absent.
workload_kind	string	The Kubernetes resource kind parsed from the manifest, such as Deployment, Pod, or Job.
workload_name	string	The workload name parsed from metadata.name.
container_count	integer	The total number of containers defined in the workload Pod template.
manifest_source	string	YAML manifest source code for Kubernetes workloads such as Deployments, Pods, and Jobs.
run_as_non_root	boolean	Indicates whether runAsNonRoot=true is configured or an equivalent security policy requires a non-root user.
host_pid_enabled	boolean	Indicates whether hostPID=true is configured.
image_references	string	One or more image names, registries, tags, or digests extracted from the container configuration.
validation_passed	boolean	Indicates whether the workload meets secure deployment requirements based on the original validation conclusion and manifest security attributes.
violation_reasons	string	Violations identified and summarized from security rules. Multiple reasons are separated by semicolons; records no violations when none are found.
image_tag_immutable	boolean	Indicates whether the container image uses a digest or meets immutable version requirements rather than relying only on a mutable tag.
host_network_enabled	boolean	Indicates whether hostNetwork=true is configured.
seccomp_profile_type	string	The Seccomp profile type parsed from securityContext.seccompProfile.type, such as RuntimeDefault, Localhost, or Unconfined.
validation_conclusion	string	The standardized result derived from the original validation conclusion, such as pass, fail, or requires manual review.
host_path_mount_present	boolean	Indicates whether a host filesystem path is mounted using hostPath or an equivalent configuration.
linux_capabilities_added	string	Capabilities extracted from container securityContext.capabilities.add. Records that no capabilities are configured when none are added.
read_only_root_filesystem	boolean	Indicates whether readOnlyRootFilesystem=true is configured.
security_compliance_score	number	A standardized compliance score calculated from workload security attributes, ranging from 0 to 100.
linux_capabilities_dropped	string	Capabilities extracted from container securityContext.capabilities.drop. Records that no capabilities are configured when none are dropped.
privileged_container_present	boolean	Indicates whether any container is configured with securityContext.privileged=true.
validation_conclusion_source	string	The original security validation conclusion or label provided with the workload manifest.

Compliance Statement

Authorization Type	Proprietary - Commercial AI Training License (No Redistribution)
Commercial Use	Requires exclusive subscription or authorization contract (monthly or per-invocation charging)
Privacy and Anonymization	No PII, no real company names, simulated scenarios follow industry standards
Compliance System	Compliant with China's Data Security Law / EU GDPR / supports enterprise data access logs

Frequently Asked Questions

Which Kubernetes workloads are covered?: The data includes manifests for workloads such as Deployments, Pods, and Jobs. It also provides parsed details including resource kind, API version, name, namespace, container count, and image references.

Which security settings and validation results are included?: Fields cover privileged containers, hostPath mounts, host networking and process namespaces, Linux capabilities, Seccomp, runtime users, read-only root filesystems, and image references. The data also includes pass or fail status, standardized conclusions, violation reasons, and a compliance score.

What training and evaluation tasks does the dataset support?: It can support Kubernetes manifest code understanding, security configuration validation, risk and violation reason identification, compliance result classification, and training or evaluation of cloud-native security detection models. Suitability depends on the model objective and data processing approach.

How can the data be obtained, and what are the licensing terms?: Refer to the product page for delivery options, version details, and applicable license terms. Before use, verify permissions for commercial use, redistribution, and derivative data, and comply with any licenses associated with included code or image references.

Can't find the data you need?

Post a request and let data providers reach out to you.

Get this Dataset

Verified for Enterprise Use

Cite this Work

@dataset{Mobiusi2026,
  title={Kubernetes Workload Security Validation Dataset},
  author={MOBIUSI INC},
  year={2026},
  url={https://www.mobiusi.com/datasets/d96f9c43a971c4c36be93336d0a16c13},
  urldate={2026-10-27},
  keywords={Kubernetes security dataset,workload security validation,container configuration audit,YAML manifest analysis,cloud-native security training,privileged container detection,Seccomp configuration validation,security compliance evaluation},
  version={1.0}
}

Using this in research? Please cite us.

placeholder

Scene

Domain

Modality

Task