How Kubespray deploys Kubernetes with security hardening.
PSA via Kubespray with baseline enforcement and restricted audit.