Control Plane ↔ Node Communication

Control Plane ↔ Node Communication An architecture diagram generated by Archify. kube-apiserver · control plane · Architecture component kube-apiserver control plane kubelet · HTTPS :10250 · Worker Nodes kubelet HTTPS :10250 kube-proxy · service proxy · Worker Nodes kube-proxy service proxy exec / logs / status Node & pod status reports Service/EndpointSlice watch Worker Nodes Legend Backend

Bidirectional HTTPS

  • • kubelet reports status; apiserver requests exec/logs
  • • Every channel is TLS-encrypted

Service propagation

  • • kube-proxy watches Service changes
  • • Applies the rules to iptables/IPVS