This is one of the standards and compliance guides you can use for k8s. The other ones I'm aware of are - CIS Benchmarks, there's coverage for Kubeadm, AKS, E

This is one of the standards and compliance guides you can use for k8s. The other ones I'm aware of are - CIS Benchmarks, there's coverage for Kubeadm, AKS, EKS, GKE, OpenShift and some others. This is a compliance guide focused on just k8s - DISA STIG for Kubernetes, another compliance guide, they don't mention which distribution but it's kubeadm from looking at the paths mentioned. - PCI Guidance for containers and container orchestration, this one is recent, it's a generic guidance targeted at container environments (docker, k8s etc) for PCI in-scope organizations but TBH it should work for most places (if that one's of interest, some more info https://raesene.github.io/ https://raesene.github.io/) Some more details on these https://www.container-security.site/general_information/container_security_standards.html https://www.container-security.site/general_information/cont... Making security guidance for k8s is kind of tricky due to the number of distros and changes between versions (https://raesene.github.io/blog/2022/09/20/Assessing-Kubernetes-Clusters-for-PCI-Compliance/ https://raesene.github.io/blog/2022/09/20/Assessing-Kubernet...)