All communication is encrypted Servers in kubernetes Clients in kubernetes set of certificates: single CA / Optional multiple CA