question for the audience here: curious what people are doing to pass their CIS benchmarks etc. for kops clusters. I see alot of info out there about how to run your cluster through a CIS benchmark test but less so what people are doing to fix them. I’ve wanted to avoid going down the route of packer/custom AMIs (as that’ll open up a can of other worms) but wondering if that’s the only real solution as I don’t see any easier/obvious solutions ones out there.