Question - What are the ways to provide API Security on Kubernetes?
Answer -
Following are some of the ways that provide API Security:
- Using the correct auth mode with the API server authentication mode= Node, RBAC
- Ensuring that the traffic is protected by TLS
- Using API authentication
- Ensuring that kubeless protects its API via authorization-mode=Webhook
- Monitoring RBAC failures
- Removing default Service Account permissions
- Ensuring that the kube-dashboard applies a restrictive RBAC policy
- Implementing a pod security policy for container restrictions and the protection of the node
- Using the latest version of kube