Kubernetes security

• Security context - leverage native K8S functionality to prevent any
  interference with docker containers - read-only filesystems, privilege
  escalation, UID/GID lock
• Service Mesh - use Istio, Linkerd, AppMesh and other service mesh
  providers for automatic encryption in-transit, control over the
  network connections, JWT authorisation, and other features
• Network Policy - Take control over the network to a greater extent.
  Control interconnections between pods and namespaces,
  direction of connection and protocol.
• OPA - Use Open Policy Agent to control the allowed configuration of any
  resource (regardless of either it is a CRD or a native resource).
  Enforce security policies of your companies.