From the course: Certified Kubernetes Security Specialist (CKS) Cert Prep

Unlock this course with a free trial

Join today to access over 24,900 courses taught by industry experts.

API server configuration

API server configuration

- Securing the API server starts with ensuring that you have security turned on from an encryption perspective. In the past, you had the ability to be able to set an insecure port as opposed to the secure port that you see here. The secure port is the port that it's going to listen on and this is the good default port that you'll use to be able to interact with with the API. You also want to make sure that you have TLS encryption turned on. This is what's going to allow you to be able to set the ciphers as well as the encryption certificates and things like that, that are used to be able to ensure that the connection to the API server is properly encrypted and protected. You're going to use the TLS cert file as well as the TLS private key file. Those are going to be flags in the API server configuration manifest and you want to make sure that those are tied to the appropriate certificates. You also want to make sure that Etcd is providing that same level of security from an encryption…

Contents