Protect

Protect your infrastructure - some overlap with secure, so this will focus more on protection from non-security related incidents (buggy code, infrastructure outages, etc)

Backups

• Restic
• Kubernetes
  • k8up: Open source k8s backup, allows for custom commands via annotations or generic RWX volume backups
  • Kasten K10: Commercial Kubernetes backup, but up to 10 nodes for free.
  • Velero: Backup both k8s manifests and volumes.

Audit

• Kube Bench - Scan K8S clsuter against CIS best practices.