ecture</figcaption></figure><p>The next security layer in Splunk’s stack is Kubernetes itself. Validating Webhooks are used to prevent the deployment of K8S objects that would allow insecure traffic in the cluster (typically around NLBs and services). Splunk also relies on <code>NetworkPolicies</code> for securing and restricting Pod to Pod connectivity.</p><h2 id=securing-layer-7-istio>Securing Layer 7: Istio</h2><p>Splunk uses Istio to enforce policy on the application layer based on the details of each