<p>According to <a href="https://kubernetes.io/docs/concepts/architecture/control-plane-node-communication/" rel="nofollow noreferrer">Control Plane-Node Communication</a>,</p>
<p>the only way to communicate securely in an insecure network would be API-kubelet communication using parameter or SSH; and the other way mentioned could not be used productively without risk. Is this correct?</p>

Sergio Barrientos
<p>As I read it, it is possible to use use the <code>--kubelet-certificate-authority</code> flag to provide a root certificate bundle.</p>
<p>But this is a narrow use case, that you also could avoid in a production environment, perhaps?</p>
<blockquote>
<p>To verify this connection, use the --kubelet-certificate-authority flag to provide the apiserver with a root certificate bundle to use to verify the kubelet's serving certificate.</p>
</blockquote>
<p>From <a href="https://kubernetes.io/docs/concepts/architecture/control-plane-node-communication/" rel="nofollow noreferrer">apiserver to kubelet docs</a></p>
