harden(k3s): node-config bundle — secrets-encryption (secretbox) + CIS hardening - #89

Open

arunanshub wants to merge 5 commits into

claude/cluster-optimization-stack-2ulghp

Commits on Jul 14, 2026

harden(k3s): add secrets-encryption at-rest playbook (Phase 4)
claude
committed
1bcbf69
harden(k3s): use secretbox provider for secrets-encryption
claude
committed
b4d2abf
harden(k3s): CIS hardening flags (NodeRestriction + kubelet stream/cipher)
claude
committed
59251e5

Commits on Jul 27, 2026