Nice! You should embed OpenZiti into it so that the K8S API can be dark and private from day 0 onwards with no inbound ports, public DNS configuration, complex

Nice! You should embed OpenZiti into it so that the K8S API can be dark and private from day 0 onwards with no inbound ports, public DNS configuration, complex FW rules, VPNs or ACLs. Here is how the team there embedded OpenZiti into Prometheus - https://openziti.github.io/articles/zitification/prometheus/part1.html https://openziti.github.io/articles/zitification/prometheus/...