The API server is the front door. Who gets in, what can they do?

You'll learn to
answer "who can access" and "what can they do"
Recap
- 1Authentication = who are you? Authorization = what can you do?
- 2TLS between every component, SSH keys on the nodes
- 3401 Unauthorized ≠ 403 Forbidden
Check yourself
kubectl answers Forbidden. Which step said no?
6.1
Stamp this lesson
Watched it and passed the check? Mark it in your logbook.
