instruction: Create a comprehensive Dockerfile for cluster applications with best practices
output: ```dockerfile
  from the wider ecosystem to implement preventative
  or detective controls around Pods, their containers, and the images that run in them.Admission controlAdmission controllers
  are plugins that intercept Kubernetes API requests and can validate or mutate
  the requests based on specific fields in the request. Thoughtfully designing
  these controllers helps to avoid unintended disruptions as Kubernetes APIs
  change across version updates. For design considerations, see
  Admission Webhook Good Practices.AuditingKubernetes audit logging provides a
  security-relevant, chronological set of records documenting the sequence of actions
  in a cluster. The cluster audits the activities generated by users, by applications
  that use the Kubernetes API, and by the control plane itself.Cloud provider securityNote: Items on this page refer to vendors external to Kubernetes. The Kubernetes project authors aren't responsible for those third-party products or projects. To add a vendor, product or project to this list, read the content guide before submitting a change. More information.If you are running a Kubernetes cluster on your own hardware or a different cloud provider,
  consult your documentation for security best practices.
  Here are links to some of the popular cloud providers' security documentation:Cloud provider securityIaaS ProviderLinkAlibaba Cloudhttps://www.alibabacloud.com/trust-centerAmazon Web Serviceshttps://aws.amazon.com/securityGoogle Cloud Platformhttps://cloud.google.com/securityHuawei Cloudhttps://www.huaweicloud.com/intl/en-us/securecenter/overallsafetyIBM Cloudhttps://www.ibm.com/cloud/securityMicrosoft Azurehttps://docs.microsoft.com/en-us/azure/security/azure-securityOracle Cloud Infrastructurehttps://www.oracle.com/securityTencent Cloudhttps://www.tencentcloud.com/solutions/data-security-and-information-protectionVMware vSpherehttps://www.vmware.com/solutions/security/hardening-guidesPoliciesYou can define security policies using Kubernetes-native mechanisms,
  such as NetworkPolicy
  (declarative control over network packet filtering) or
  ValidatingAdmissionPolicy (declarative restrictions on what changes
  someone can make using the Kubernetes API).However, you can also rely on policy implementations
  ```