Study. uk . com
  1. Home
  2. All questions
  3. Question 944

CKA study material · question 944 of 1000

Why is granting get on nodes/proxy more dangerous than it looks?

  1. It allows editing the Node object's labels
  2. It opens kubelet APIs that can run commands in any container on the node
  3. It exposes the node's kubeconfig through the proxy
  4. It bypasses NetworkPolicy for traffic from that node
Show the answer

Answer: B. It opens kubelet APIs that can run commands in any container on the node

The nodes/proxy subresource reaches powerful kubelet endpoints, so even a read verb on it is effectively command execution on that node's workloads.

Source: System Logs (Kubernetes) — Log query

Challenge yourself on this topic → Study as cards