Kubernetes security architecture implementing network policies for pod-to-pod traffic isolation, OPA Gatekeeper for admission control, Falco for runtime threat detection, cert-manager for TLS certificates, and sealed secrets for encrypted credential management. Fork this diagram on Diagrams.so to customize the network segmentation or add compliance scanning for your security posture. Source: https://landscape.cncf.io/