Different ways to provide API-Security on kubernetes

0 votes
Could you list the different ways in which I can provide API-security on kubernetes?
Jul 23 in Kubernetes by Karan
• 1,190 points
12 views

1 answer to this question.

0 votes
  • Use the correct auth mode with API server authorization-mode=Node,RBAC

  • Ensure all traffic is protected by TLS

  • Use API authentication (smaller cluster may use certificates but larger multi-tenants may want an AD or some OIDC authentication).

  • Make kubeless protect its API via authorization-mode=Webhook

  • Make sure the kube-dashboard uses a restrictive RBAC role policy

  • Monitor RBAC failures

  • Remove default ServiceAccount permissions

  • Filter egress to Cloud API metadata APIs

  • Filter out all traffic coming into kube-system namespace except DNS

  • A default deny policy on all inbound on all namespaces is good practice. You explicitly allow per deployment.

  • Use a podsecurity policy to have container restrictions and protect the Node

  • Keep kube at the latest version.

answered Jul 23 by Sirajul
• 16,920 points

Related Questions In Kubernetes

0 votes
1 answer
0 votes
1 answer

Unable to run Kubernetes on rancher cluster

switch Docker to 1.12.x; Kubernetes doesn't support ...READ MORE

answered Aug 28, 2018 in Kubernetes by Kalgi
• 39,170 points
112 views
0 votes
1 answer

Not able to access kubernetes api from a pod in azure

Follow these steps Add --bind-address=0.0.0.0 option to the line https://github.com/kubernetes/kubernetes/blob/v1.2.0/docs/getting-started-guides/coreos/azure/cloud_config_templates/kubernetes-cluster-main-nodes-template.yml#L218  Created ...READ MORE

answered Aug 30, 2018 in Kubernetes by Kalgi
• 39,170 points
48 views
0 votes
2 answers

Not able to expose port 80 on the host, kubernetes ingress

I was facing the same error. The nginix ...READ MORE

answered Sep 11, 2018 in Kubernetes by Kalgi
• 39,170 points
66 views
0 votes
1 answer
0 votes
3 answers

Error while joining cluster with node

Hi Kalgi after following above steps it ...READ MORE

answered Jan 17 in Others by anonymous
1,578 views
+3 votes
1 answer
0 votes
1 answer

What all packages do i need to install to use kubernetes on my machine?

Install below packages on all of your ...READ MORE

answered Jul 11 in Kubernetes by Sirajul
• 16,920 points
19 views
0 votes
1 answer