Security and access management
Security is a critical consideration for building production-grade systems on Kubernetes. As a practitioner planning to use Kubernetes as the foundational platform for ML, it is important to become familiar with the various security aspects of Kubernetes.
Kubernetes has many built-in security features. These security features allow you to implement fine-grained network traffic control and access control to different Kubernetes APIs and services. In this section, we will discuss network security, authentication, and authorization.
API authentication and authorization
Access to Kubernetes APIs can be authenticated and authorized for both users and Kubernetes service accounts (a service account provides an identity for processes running in a Pod).
Users are handled outside of Kubernetes, and there are a number of user authentication strategies for Kubernetes:
- X.509 client certificate: A signed certificate is sent to the API server...
