Kubernetes security

- Security context - leverage native K8S functionality to prevent any interference with docker containers - read-only filesystems, privilege escalation, UID/GID lock

- Service Mesh - use Istio, Linkerd, AppMesh and other service mesh providers for automatic encryption in-transit, control over the network connections, JWT authorization, and other features

- Network Policy - Take control over the network to a greater extent. Control interconnections between pods and namespaces, direction of connection and protocol

- OPA - Use Open Policy Agent to control the allowed configuration of any resource (regardless of either it is a CRD or a native resource). Enforce security policies of your companies