Cluster Secruity

• Key areas

  • cluster perimeter AAA (TLS encryption, and authentication, authorization and audit) via ingress (nginx)

  • External communication via egress

  • Service to service AAA (internal cluster)

    • Mutual TLS

  • Zero-trust network

    • build secruity on external (azure/google etc) or internal (compnaies own cluster) built clusters