Kubernetes configuration

- RBAC analysis (kubectl, rbac-lookup, rbac-tool) - Pod Security Standards/Policies (privileged, host* capabilities) - Network policies and default deny enforcement - Service account token exposure and automount - API server anonymous access and audit logging