Explanation
Running only a single service in each container and using version tags for base images and dependencies helps limit the attack surface of your Docker container. This ensures that only the necessary services are running and that you always have the latest versions of the base images and their dependencies, reducing the risk of malicious code being included in the container image. Reference: Docker Documentation, Security Best Practices.

To enable centralized logging in a Kubernetes environment, you must create a DaemonSet that deploys a container with a logging agent on every node in the cluster. This allows all of the logs from each node to be collected in one place, allowing for easier analysis and management. Reference: Kubernetes Documentation, Logging Architecture.