Kubernetes Security: 10 Best Practices from the Industry and Community
https://cast.ai/blog/kubernetes-security-10-best-practices/
Kubernetes requires extensive configuration, and keeping container security at the right level is always challenging. One of the best ways to tighten your clusters’ security is by implementing tactics that have become industry-standard.4 Here are 10 most important ones.
Few high-level Kubernetes security checklist:
Infrastructure attacks. Kubernetes infrastructure elements such as the API server, etcd, and controllers all present their own attack surfaces during runtime. Complexity. A Kubernetes cluster's ongoing health has many moving parts. Compromised containers must be isolated, stopped, and replaced with healthy ones as soon as possible, while the source of the attack is identified and remedied.
Regarding point 7 "Isolate your Kubernetes nodes" I can highly recommend using Constellation: https://github.com/edgelesssys/constellation
"From a security perspective, Constellation is designed to keep all data always encrypted and to prevent access from the infrastructure layer (i.e., remove the infrastructure from the TCB). This includes access from datacenter employees, privileged cloud admins, and attackers coming through the infrastructure (e.g., malicious co-tenants escalating their privileges)."