4.minimize_microservice_vulnerabilities.md

Minimize Microservice Vulnerabilities - 20%

Setup appropriate OS level security domains e.g. using PSP, OPA, security contexts

Refer Pod Security Policies

Refer Pod Security Context

Refer Open Policy Agent

Manage kubernetes secrets

Refer Secrets

Use container runtime sandboxes in multi-tenant environments (e.g. gvisor, kata containers)

Refer Runtime Class

Implement pod to pod encryption by use of mTLS

Refer Istio MTLS