Network security

Cilium

NeuVector by SUSE

Control Plane Hardening (API restriction)

Network policy recipes

Service mesh

mTLS Autocert

//--- disable all Ingres

apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
 name: default-deny-ingress
spec:
 podSelector: {}
 policyTypes:
   - Ingress