Hardening Guides (OS, network, K8s) 🔐

Baseline steps to reduce attack surface.

Insert screenshot of Firewall ruleset and K8s NetworkPolicies

OS (Linux/Windows) 🖥️

• Patch regularly; enable auto-updates where safe

• SSH: key-based auth, disable root login; RDP: strong password + NLA

• Minimal packages; fail2ban/Windows Defender

Network 🌐

• Default deny inbound; allow only required ports

• Restrict SSH/RDP to bastion or VPN

• Use VPC isolation and separate subnets

Kubernetes ☸️

• Enforce RBAC, PodSecurity (if available)

• Apply NetworkPolicies; restrict egress

• Scan images; pin base images; restrict :latest

• Use readiness/liveness probes; secrets outside Repo