Increase security of exposed services

[nklsla]

Ingress are supposedly more secure compared to nodePort. Inspiration

• [ ] Landing page/dashboard
• [ ] Kubeflow
• [ ] Grafana
• [ ] Docker registry (Auto redirect when pushing?)
• [ ] Prometheus
• [ ] SSH

[nklsla]

Create a single point of connection for the whole cluster and either create small dashboard for different services or just use "/service" suffix for the dns-name.

This should work for both local and public exposure.

In the end there could be two connection points. one for SSH (admin) and one for browser (user)

[nklsla]

How to solve the docker repository?

[nklsla]

Google after common pitfalls regarding cluster security

[nklsla]

https://devopscube.com/setup-ingress-kubernetes-nginx-controller/