From the course: Kubernetes Network and Cluster Hardening by Pearson
Unlock this course with a free trial
Join today to access over 25,200 courses taught by industry experts.
API server hardening - Kubernetes Tutorial
From the course: Kubernetes Network and Cluster Hardening by Pearson
API server hardening
The basic configurations we did in the previous lesson were focused mostly on encryption, as well as being able to set the appropriate ports and binding addresses and things like that. Obviously, those are important parts of security. But in addition, we want to make sure that we are hardening our API server from individuals that might want to connect to it or, you know, for nefarious purposes. And ultimately, that comes down to providing a level of security that is going to take a page from lesson 7 around network security. So being able to set our policies, our network policies, to be able to restrict access to the API server, and etcd is a crucial part. That is a default configuration that you want to do for all of your namespaces. And it's something that we, again, covered in lesson 7. But it does bear repeating here, at least to make sure that you are thinking about that from the perspective of hardening your API server. You only want to allow trusted nodes or administrators to…