<p>I'm a bit disturbed on how to secure the kubernetes API for call and access, also Kube-ui is available to everybody.
How can I set credential to secure all the services ?</p>

<p>Thank you</p>

<p>The Kubernetes API supports multiple forms of <a href="http://kubernetes.io/v1.0/docs/admin/authentication.html">authentication</a>: http basic auth, bearer token, client certificates. When launching the apiserver, you can enable / disable each of these authentication methods with command line flags. </p>

<p>You should also be running the apiserver where the insecure port is only accessible to localhost, so that all connections coming across the network use https. By having your api clients verify the TLS certificate presented by the apiserver, they can verify that the connection is both encrypted and not susceptible to man-in-the-middle attacks. </p>

<p>By default, anyone who has access credentials to the apiserver has full access to the cluster. You can also configure more fine grained <a href="http://kubernetes.io/v1.0/docs/admin/authorization.html">authorization</a> policies which will become more flexible and configurable in future Kubernetes releases. </p>
