CoreWeave Security Basics

Community-contributed. Not affiliated with, endorsed by, or sponsored by CoreWeave, Inc. CoreWeave is a registered trademark of CoreWeave, Inc.

Overview

CoreWeave provides bare-metal GPU cloud on Kubernetes. Security concerns center on compute credential management (kubeconfig, deploy tokens), network isolation between inference workloads, secrets for model registry access (HuggingFace, container registries), and protecting sensitive training data on persistent volumes. A compromised namespace can expose GPU resources, model weights, and customer inference data.

Prerequisites

• A named namespace owner and a current data classification for the workload.
• Secrets-manager access for deployment credentials; no credentials in manifests or git.
• Authority to apply Kubernetes policies in the target namespace and an approved rollback plan.

Instructions