Following are some of the ways that provide API Security:
Using the correct auth mode with the API server authentication mode= Node, RBAC
Ensuring that the traffic is protected by TLS
Using API authentication
Ensuring that kubeless protects its API via authorization-mode=Webhook
Monitoring RBAC failures
Removing default Service Account permissions
Ensuring that the kube-dashboard applies a restrictive RBAC policy
Implementing a pod security policy for container restrictions and the protection of the node
Using the latest version of kube