Securing Kubernetes clusters

In this section, we will give some general guidance on how to secure Kubernetes clusters. Additionally, we are going to explore the topic of API user authentication in AKS Engine clusters using Azure Active Directory (AAD) integration. The list of best practices provided in this chapter is not exhaustive, so please always review the latest official documentation to ensure that you follow the recommendations.

Now, let's go through the list of general recommendations in the following subsections.

Using built-in RBAC for authorization

We have covered the role-based access control (RBAC) provided by Kubernetes for API authorization in Chapter 11, Configuring Applications to Use Kubernetes Features...