Host HardeningChoice of Operating SystemNonessential ProcessesHost-Based FirewallingAlways Research the Latest Best PracticesCluster HardeningSecure the Kubernetes DatastoreSecure the Kubernetes API ServerEncrypt Kubernetes Secrets at RestRotate Credentials FrequentlyAuthentication and RBACRestricting Cloud Metadata API AccessEnable AuditingRestrict Access to Alpha or Beta FeaturesUpgrade Kubernetes FrequentlyUse a Managed Kubernetes ServiceCIS BenchmarksNetwork SecurityConclusion