Add docs team suggestions

docs/reference-guides/rancher-security/rancher-security-best-practices.md

@@ -33,9 +33,10 @@ These ports have TLS SAN certificates which list nodes' public IP addresses. An
 
 By default, Kubernetes does not provide enforcement mechanisms for baseline username policies. In Rancher, this means that any enforcement of username formats, naming conventions, or baseline policies is expected to be handled by the external identity provider's policies, if such policies are in place.
 
-In Rancher, `admin` is the default username for the Administrator user, as highlighted [here](https://ranchermanager.docs.rancher.com/getting-started/installation-and-upgrade/resources/bootstrap-password)
+In Rancher, `admin` is the default username for the Administrator user, as highlighted [here](../../getting-started/installation-and-upgrade/resources/bootstrap-password.md)
 
 Examples of potential baseline policies include:
+
 - Requiring usernames to follow an organizational convention (e.g., `firstname.lastname`)
 - Enforcing minimum or maximum length requirements
 - Disallowing certain special characters
@@ -43,15 +44,18 @@ Examples of potential baseline policies include:
 
 Without these controls at the identity provider layer, there is a risk of inconsistent or insecure username practices, which can complicate access audits and lead to privilege escalation attempts.
 
-Important: Rancher currently enforces only a [minimum password length](https://ranchermanager.docs.rancher.com/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/manage-users-and-groups#minimum-password-length)
+> [!IMPORTANT]  
+> Rancher currently enforces only a [minimum password length](../../how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/manage-users-and-groups#minimum-password-length.md)
 
 **Recommendation:**
 We strongly advice that customers:
+
 - Review and configure username baseline policies directly in their external identity providers (e.g., LDAP, Active Directory, SAML, or OIDC).
 - Ensure that those policies align with the organization’s security and compliance requirements.
 - Regularly audit user accounts to detect naming inconsistencies or policy violations.
 
 For more information, see:
+
 - [OWASP Cheat Sheet: Authentication](https://cheatsheetseries.owasp.org/cheatsheets/Authentication_Cheat_Sheet.html)
 - [OWASP Identity Management](https://owasp.org/www-project-top-ten/2017/A2_2017-Broken_Authentication)
 
@@ -60,12 +64,14 @@ For more information, see:
 Rancher is designed to support a wide range of deployment scenarios, including environments where customers may programmatically automate the creation or provisioning of large numbers of clusters. Imposing strict application-level limits within Rancher itself could interfere with legitimate workloads that require dynamic scaling.
 
 For example:
+
 - CI/CD pipelines may create and tear down clusters frequently.
 - Self-service portals could provision clusters on-demand for developers.
 - Test environments may generate high volumes of API calls.
 
 **Risk:**
 Without appropriate rate limiting, adversaries could exploit unauthenticated or authenticated endpoints to:
+
 - Exhaust resources (Denial of Service).
 - Inflate storage costs.
 - Degrade performance for legitimate users.
@@ -79,6 +85,7 @@ The most effective way to mitigate this risk is to implement rate limiting and a
 - Apply a resource quota, which is a Rancher feature that limits the resources available to a project or namespace.
 
 For more information, see:
-- [Project Resource Quotas](https://ranchermanager.docs.rancher.com/how-to-guides/advanced-user-guides/manage-projects/manage-project-resource-quotas)
+
+- [Project Resource Quotas](../../how-to-guides/advanced-user-guides/manage-projects/manage-project-resource-quotas/manage-project-resource-quotas.md)
 - [OWASP API Security Top 10 - API4:2019 - Lack of Resources & Rate Limiting](https://owasp.org/API-Security/editions/2023/en/0xa4-lack-of-resources-rate-limiting/)
-- [OWASP Cheat Sheet: Rate Limiting](https://cheatsheetseries.owasp.org/cheatsheets/Rate_Limiting_Cheat_Sheet.html)
+- [OWASP Cheat Sheet: Rate Limiting](https://cheatsheetseries.owasp.org/cheatsheets/Rate_Limiting_Cheat_Sheet.html)