External Access Paths

External Access Paths An architecture diagram generated by Archify. External client · kubectl / browser · Architecture component External client kubectl / browser kube-apiserver · cluster control · Architecture component kube-apiserver cluster control Service / Ingress · L4 / L7 entry point · Architecture component Service / Ingress L4 / L7 entry point Pod · Application · Architecture component Pod Application Admin traffic (HTTPS :6443) Application traffic Legend Frontend Backend Cloud External

Two entry paths

  • • Operators control the cluster via kube-apiserver
  • • Users reach apps via Service/Ingress

Minimal exposure

  • • Pods are never exposed directly
  • • All external traffic passes a defined entry point