Another guide may be the CIS benchmark guide [1]. I can't attest to efficacy of this particular benchmark from defense.gov (we don't use k8s at $DAYJOB), but w

Another guide may be the CIS benchmark guide [1]. I can't attest to efficacy of this particular benchmark from defense.gov (we don't use k8s at $DAYJOB), but we've leveraged other benchmarks from CIS for various flavors of Windows/ Linux. [1] https://www.cisecurity.org/benchmark/kubernetes https://www.cisecurity.org/benchmark/kubernetes