Study. uk . com
  1. Home
  2. All questions
  3. Question 537

CKA study material · question 537 of 1000

You are hardening a cluster whose nodes sit on an untrusted network. Which statement about node-to-control-plane traffic is correct?

  1. Every API call from a node terminates at the API server, and no other control plane component accepts remote connections
  2. Nodes connect directly to etcd for object reads to reduce API server load
  3. The scheduler opens a connection to each kubelet to deliver binding decisions
  4. kube-controller-manager exposes a remote endpoint that nodes poll for work
Show the answer

Answer: A. Every API call from a node terminates at the API server, and no other control plane component accepts remote connections

Kubernetes uses a hub-and-spoke API pattern: nodes and their Pods talk only to the API server, which is what makes it safe by default to run that path over an untrusted network.

Source: Communication between Nodes and the Control Plane (Kubernetes) — Node to Control Plane

Challenge yourself on this topic → Study as cards