instruction: Create a comprehensive Dockerfile for cluster applications with best practices
output: ```dockerfile
  from the wider ecosystem to implement preventative
  or detective controls around Pods, their containers, and the images that run in them.
  Auditing
  Kubernetes audit logging provides a
  security-relevant, chronological set of records documenting the sequence of actions
  in a cluster. The cluster audits the activities generated by users, by applications
  that use the Kubernetes API, and by the control plane itself.
  Cloud provider security
  Note: Items on this page refer to vendors external to Kubernetes. The Kubernetes project authors aren't responsible for those third-party products or projects. To add a vendor, product or project to this list, read the content guide before submitting a change. More information.
  If you are running a Kubernetes cluster on your own hardware or a different cloud provider,
  consult your documentation for security best practices.
  Here are links to some of the popular cloud providers' security documentation:
  Cloud provider security
  
  IaaS Provider
  Link
  
  Alibaba Cloud
  https://www.alibabacloud.com/trust-center
  
  Amazon Web Services
  https://aws.amazon.com/security
  
  Google Cloud Platform
  https://cloud.google.com/security
  
  Huawei Cloud
  https://www.huaweicloud.com/intl/en-us/securecenter/overallsafety
  
  IBM Cloud
  https://www.ibm.com/cloud/security
  
  Microsoft Azure
  https://docs.microsoft.com/en-us/azure/security/azure-security
  
  Oracle Cloud Infrastructure
  https://www.oracle.com/security
  
  VMware vSphere
  https://www.vmware.com/security/hardening-guides
  
  Policies
  You can define security policies using Kubernetes-native mechanisms,
  such as NetworkPolicy
  (declarative control over network packet filtering) or
  ValidatingAdmissionPolicy (declarative restrictions on what changes
  someone can make using the Kubernetes API).
  However, you can also rely on policy implementations
  ```