問題文
An internal administrative service must be reachable by cluster workloads but must not be exposed outside the cluster. Which Service type matches that requirement?
選択肢
- NodePort, whose port is bound on each node, and the nodes themselves sit inside the cluster's own network.
- ClusterIP, which allocates an address that is reachable only from inside the cluster.
- ExternalName, which maps the Service to a DNS name that only workloads inside the cluster can resolve.
- LoadBalancer, which can be configured with an allowlist of its own, so outside callers are turned away.