Study. uk . com
  1. Home
  2. All questions
  3. Question 541

CKA study material · question 541 of 1000

A cluster still relies on SSH tunnels for control-plane-to-node traffic. What is the documented replacement?

  1. An egress NetworkPolicy on the control plane namespace
  2. The Konnectivity service
  3. Setting --kubelet-certificate-authority on the API server
  4. Running kube-proxy in nftables mode
Show the answer

Answer: B. The Konnectivity service

SSH tunnels are deprecated and Konnectivity replaces them, providing a TCP proxy in two halves: agents on the node network dial out to a server beside the control plane.

Source: Communication between Nodes and the Control Plane (Kubernetes) — Control plane to node › Konnectivity service

Challenge yourself on this topic → Study as cards