title: kubectl exec vs ssh using bastion
body: <p>KOPS lets us create a Kubernetes cluster along with a bastion that has ssh access to the cluster nodes</p>
  
  <p>With this setup is it still considered safe to use <code>kubectl</code> to interact with the Kubernetes API server?</p>
  
  <p><code>kubectl</code> can also be used to interact with shell on the pods? Does this need any restrictions?</p>
  
  <p>What are the precautionary steps that need to be taken if any?
  Should the Kubernetes API server also be made accessible only through the bastion?</p>