問題文
A platform engineer is reading the manifests of a fresh Cilium installation and notices that cilium-agent is deployed as a DaemonSet while cilium-operator is a Deployment with a small replica count. A colleague asks why the two are shaped differently. Which explanation matches the roles of the two components?
選択肢
- Cilium-agent runs on every node so each node holds its own copy of the policy database, while the operator decides which node each pod is scheduled on.
- The operator has a small replica count because it forwards the packets of the pods on its own node, and the agent only exposes a status endpoint.
- The agent must run on every node because it programs that node's kernel while the operator handles duties that should be performed once for the whole cluster.
- Both shapes are interchangeable and either component can be swapped.