Walk me through the steps to secure a Kubernetes cluster from an external attacker who has gained access to a single pod.