If you’ve worked with Kubernetes, you know that for many it can be quite a complex machine. And by “properly,” I mean secured, with secure communication, proper network isolation, secure secrets, etc.
Securing etcd is critical to Kubernetes security.
These will provide a more robust and secure system for vital Kubernetes secrets management.
An open source application like https://goteleport.com provides secure access to Kubernetes clusters by way of short-lived kubeconfig files (and certificates) via single sign-on.