Guidance on Hardening K3S

Hi All,

Is there any guidance on hardening and production deployments best practices of K3S available ?

I’m thinking along the lines of not running the K3S processes as root and things like Kubernetes Network policies etc