Inter-Component Communication

Inter-Component Communication An architecture diagram generated by Archify. API Server · kube-apiserver · Kubernetes API Server kube-apiserver Webhook Config · MutatingWebhookConfiguration · Kubernetes Webhook Config MutatingWebhookConfiguration Destination · gRPC :8086 · Control plane Destination gRPC :8086 Identity · gRPC :8080 · Control plane Identity gRPC :8080 Proxy Injector · HTTPS :8443 · Control plane Proxy Injector HTTPS :8443 Policy · gRPC :8090 · Control plane Policy gRPC :8090 Proxies (1..N) · linkerd2-proxy · gRPC clients · Data plane Proxies (1..N) linkerd2-proxy · gRPC clients gRPC gRPC gRPC Admission webhook registration watch Services/Endpoints validate ServiceAccount watch Server/ServerAuthorization Kubernetes Control plane Data plane Legend Proxies Linkerd Kubernetes

gRPC API ports

  • • Destination 8086 — service discovery API
  • • Identity 8080 — certificate issuance API
  • • Policy 8090 — policy API

Admission Webhook

  • • Proxy Injector 8443 — HTTPS Admission Webhook
  • • Called by the API server on pod creation requests to inject the sidecar

Proxy ports

  • • Inbound 4143 · Outbound 4140 — HTTP/gRPC
  • • Admin 4191 — metrics, health checks