We should test security best practices in k8s

[fforootd]

I think it would be best to remediate as much as possible in an automated manor. So we could run something like kube-bench in our test pipeline and then remediate most of the issues.

Target should be that the kubeadm deployment is hardened automatically without a lot of customization from customers.

@thesephirot @eliobischof @stebenz inputs?

[fforootd]

Test results from an existing cluster with orbiter version 0.12.5 can be found with the INTERNAL link below

https://drive.google.com/drive/folders/1Hs0BKqS0o4mEDWTYiFdtSxl1z0XheIaH

[fforootd]

Some more links

https://github.com/kubernetes/kubeadm/issues/683

https://github.com/kubernetes/kubeadm/issues/1649

[thesephirot]

did a basic kube-bench test,... the "doing" is not that bad,... I guess we should test this on a control plane to have a complete log and check the output

citadel-kube-bench-logs.txt