A security-based system for allocating a software container to a node of a network, the security-based system comprising: a processor ; and a set of memory resources storing a set of engines executable by the processor , characterized in that the set of engines comprises: a discovery engine to: discover a node in a cluster of nodes; discover a node security attribute associated with the discovered node; create a security attribute label corresponding to the discovered node security attribute; and add the security attribute label to metadata associated with the discovered node; a translation engine to: generate a node selector from a container security attribute specified in metadata associated with a container image of the software container, wherein the node selector is a label that indicates specific requirements of attributes that a node needs to have to host a container; and associate the node selector with the software container; and a container orchestration engine to: schedule the software container to a selected node in the cluster of nodes associated with a node security attribute that matches the node selector associated with the software container. a processor ; and a set of memory resources storing a set of engines executable by the processor , characterized in that the set of engines comprises: a discovery engine to: discover a node in a cluster of nodes; discover a node security attribute associated with the discovered node; create a security attribute label corresponding to the discovered node security attribute; and add the security attribute label to metadata associated with the discovered node; a translation engine to: generate a node selector from a container security attribute specified in metadata associated with a container image of the software container, wherein the node selector is a label that indicates specific requirements of attributes that a node needs to have to host a container; and associate the node selector with the software container; and a container orchestration engine to: schedule the software container to a selected node in the cluster of nodes associated with a node security attribute that matches the node selector associated with the software container. a discovery engine to: discover a node in a cluster of nodes; discover a node security attribute associated with the discovered node; create a security attribute label corresponding to the discovered node security attribute; and add the security attribute label to metadata associated with the discovered node; discover a node in a cluster of nodes; discover a node security attribute associated with the discovered node; create a security attribute label corresponding to the discovered node security attribute; and add the security attribute label to metadata associated with the discovered node; a translation engine to: generate a node selector from a container security attribute specified in metadata associated with a container image of the software container, wherein the node selector is a label that indicates specific requirements of attributes that a node needs to have to host a container; and associate the node selector with the software container; and generate a node selector from a container security attribute specified in metadata associated with a container image of the software container, wherein the node selector is a label that indicates specific requirements of attributes that a node needs to have to host a container; and associate the node selector with the software container; and a container orchestration engine to: schedule the software container to a selected node in the cluster of nodes associated with a node security attribute that matches the node selector associated with the software container. <EOS>