Comment by ozim

You also had a pentest of your setup so you are perfectly sure you don't expose something to the internet that you are not supposed to?

You also considered updates for Ubuntu and microk8s so you have strategy for updating your nodes with newer versions and security patches.

I can follow a tutorial to set something up - but then there is always whole world of things that is never included in tutorials.

Just like kubelet accepting unauthenticated requests by default: https://medium.com/handy-tech/analysis-of-a-kubernetes-hack-...