Kubernetes Workload Security Validation Dataset
#Manifest code understanding #Security configuration validation #Violation reason identification #Compliance result classification #Kubernetes security audit #Cloud-native configuration review #Container deployment compliance #Workload risk analysis
- Records
- 3120
- Size
- 0.3GB
- Format
- JSON
- Provider
MOBIUSI INC- Updated
- v1.02026-11-04
AI Analysis & Value Prop
Covers YAML manifest source code and associated security validation results for Kubernetes workloads such as Deployments, Pods, and Jobs, with key details including resource kind, namespace, container count, and image references. The data highlights security attributes such as privileged containers, host resource access, Linux capabilities, Seccomp, runtime users, and root filesystem settings to support assessment against secure deployment requirements. It is suitable for cloud-native code understanding, configuration compliance validation, risk identification, and training or evaluating security detection models.
Overview
Dataset Insights
Preview
Sample Examples
sample.json
{}
Schema
Technical Specifications
| Field | Type | Description |
|---|---|---|
| file_name | string | File name |
| namespace | string | The Kubernetes namespace for the workload. If not explicitly configured, this field records the default namespace or that no namespace was configured. |
| api_version | string | The Kubernetes API version declared in the workload manifest. |
| run_as_user | string | The runtime user ID parsed from runAsUser or the container security context. Records that no value is configured when absent. |
| workload_kind | string | The Kubernetes resource kind parsed from the manifest, such as Deployment, Pod, or Job. |
| workload_name | string | The workload name parsed from metadata.name. |
| container_count | integer | The total number of containers defined in the workload Pod template. |
| manifest_source | string | YAML manifest source code for Kubernetes workloads such as Deployments, Pods, and Jobs. |
| run_as_non_root | boolean | Indicates whether runAsNonRoot=true is configured or an equivalent security policy requires a non-root user. |
| host_pid_enabled | boolean | Indicates whether hostPID=true is configured. |
| image_references | string | One or more image names, registries, tags, or digests extracted from the container configuration. |
| validation_passed | boolean | Indicates whether the workload meets secure deployment requirements based on the original validation conclusion and manifest security attributes. |
| violation_reasons | string | Violations identified and summarized from security rules. Multiple reasons are separated by semicolons; records no violations when none are found. |
| image_tag_immutable | boolean | Indicates whether the container image uses a digest or meets immutable version requirements rather than relying only on a mutable tag. |
| host_network_enabled | boolean | Indicates whether hostNetwork=true is configured. |
| seccomp_profile_type | string | The Seccomp profile type parsed from securityContext.seccompProfile.type, such as RuntimeDefault, Localhost, or Unconfined. |
| validation_conclusion | string | The standardized result derived from the original validation conclusion, such as pass, fail, or requires manual review. |
| host_path_mount_present | boolean | Indicates whether a host filesystem path is mounted using hostPath or an equivalent configuration. |
| linux_capabilities_added | string | Capabilities extracted from container securityContext.capabilities.add. Records that no capabilities are configured when none are added. |
| read_only_root_filesystem | boolean | Indicates whether readOnlyRootFilesystem=true is configured. |
| security_compliance_score | number | A standardized compliance score calculated from workload security attributes, ranging from 0 to 100. |
| linux_capabilities_dropped | string | Capabilities extracted from container securityContext.capabilities.drop. Records that no capabilities are configured when none are dropped. |
| privileged_container_present | boolean | Indicates whether any container is configured with securityContext.privileged=true. |
| validation_conclusion_source | string | The original security validation conclusion or label provided with the workload manifest. |
Trust
Compliance Statement
Authorization Type
Proprietary - Commercial AI Training License (No Redistribution)
Commercial Use
Requires exclusive subscription or authorization contract (monthly or per-invocation charging)
Privacy and Anonymization
No PII, no real company names, simulated scenarios follow industry standards
Compliance System
Compliant with China's Data Security Law / EU GDPR / supports enterprise data access logs
FAQ
Frequently Asked Questions
- Which Kubernetes workloads are covered?
- The data includes manifests for workloads such as Deployments, Pods, and Jobs. It also provides parsed details including resource kind, API version, name, namespace, container count, and image references.
- Which security settings and validation results are included?
- Fields cover privileged containers, hostPath mounts, host networking and process namespaces, Linux capabilities, Seccomp, runtime users, read-only root filesystems, and image references. The data also includes pass or fail status, standardized conclusions, violation reasons, and a compliance score.
- What training and evaluation tasks does the dataset support?
- It can support Kubernetes manifest code understanding, security configuration validation, risk and violation reason identification, compliance result classification, and training or evaluation of cloud-native security detection models. Suitability depends on the model objective and data processing approach.
- How can the data be obtained, and what are the licensing terms?
- Refer to the product page for delivery options, version details, and applicable license terms. Before use, verify permissions for commercial use, redistribution, and derivative data, and comply with any licenses associated with included code or image references.
Can't find the data you need?
Post a request and let data providers reach out to you.
Get this Dataset
High-quality data, ready for your next AI breakthrough.
Cite this Work
@dataset{Mobiusi2026,
title={Kubernetes Workload Security Validation Dataset},
author={MOBIUSI INC},
year={2026},
url={https://www.mobiusi.com/datasets/d96f9c43a971c4c36be93336d0a16c13?cate=3},
urldate={2026-10-27},
keywords={Kubernetes security dataset,workload security validation,container configuration audit,YAML manifest analysis,cloud-native security training,privileged container detection,Seccomp configuration validation,security compliance evaluation},
version={1.0}
}Using this in research? Please cite us.
placeholder
placeholder
placeholder
placeholder
placeholder
placeholder
placeholder