Gardener apiServer: missing enforcement of private-only mode across clouds
Gardener apiServer: Private‑Only Enforcement The Gardener apiServer configuration can restrict access to a shoot cluster’s Kubernetes API server, but the default behaviour leaves the endpoint exposed via a cloud provider load balancer. While the spec allows specifying network policies or firewall rules, the toggle to enforce a “private‑only” API server is no