Control Plane Internal Communication

Control Plane Internal Communication An architecture diagram generated by Archify. kube-scheduler · pod placement · Architecture component kube-scheduler pod placement kube-controller-manager · reconciliation loops · Architecture component kube-controller-manager reconciliation loops cloud-controller-manager · cloud integration · Architecture component cloud-controller-manager cloud integration kube-apiserver · the only comms hub · Architecture component kube-apiserver the only comms hub etcd · cluster state store · Architecture component etcd cluster state store watch / bind watch / update watch / update read/write Legend Backend Database

Hub-and-spoke

  • • Every component talks only to kube-apiserver
  • • Components never talk to each other directly

etcd access control

  • • Only kube-apiserver talks to etcd directly
  • • Authn, authz, and validation enforced at one point