network policy

controlling access to kube api

certificate

auth

TLS

ssh

Generate certificate

kube api == k8s