title: Restrict access to Kubernetes UI via VPN or other on GKE
body: <p>GKE currently exposes Kubernetes UI publicly and by default is only protected by basic auth. </p>
  
  <p>Is there a better method for securing access to the UI? It appears to me this should be accessed behind a secure VPN to prevent various types of attacks. If someone could access the Kubernetes UI, they could cause a lot of damage to the cluster. </p>