[GH-15881] Added K8s security note (#15884)

* ht/ added security note

* ht/minor update

* ht/updated root and added link to security

h2o-docs/src/product/cloud-integration/kubernetes.rst

@@ -26,6 +26,13 @@ After H2O is started, there must be a way for H2O nodes to "find" themselves and
 
 For reproducibility, resource limits and requests should always be set to equal values.
 
+**Note**: Official K8s images don’t apply any `security settings <../security.html>`__. The default user is ``root``. If you require a secure interface with H2O running the image, you need to change the user and execution command to add security parameters before running the image. The following is the default command used in Docker images:
+
+::
+  
+  java -Djava.library.path=/opt/h2oai/h2o-3/xgb_lib_dir -XX:+UseContainerSupport -XX:MaxRAMPercentage=50 -jar /opt/h2oai/h2o-3/h2o.jar
+
+
 Headless Service
 ~~~~~~~~~~~~~~~~