Kind of a vague question, but I take it you mean OS-level hardening, which should be fine with CIS hardening.

In a virtualized environment, there are many security layers to take care of: network access, storage, api control, identity access, cluster config, backups, etc.