Phase 4 Capstone Deliverable
A production-grade Kubernetes platform:
- Multi-node cluster with Cilium networking and RBAC
- Terraform-managed cloud infrastructure (EKS, RDS, ElastiCache)
- Vault with dynamic secrets and K8s auth
- Pod Security Standards enforced
- Container image signing with Cosign
- Kyverno admission policies
Deliverable: A single terraform apply that provisions the full infrastructure stack. Document in INFRASTRUCTURE.md.