問題文
During an architecture review someone claims that kube-proxy enforces which Pods may talk to each other. Which description of the role of kube-proxy is accurate?
選択肢
- It evaluates the podSelector of every NetworkPolicy object in the cluster and installs the corresponding allow and deny rules on the node, so removing it removes the isolation.
- It authenticates each Pod that connects to a Service, so a Pod whose identity is not accepted is refused at the node.
- It programs the node so that traffic sent to a Service address is forwarded to a backing Pod; deciding which connections are allowed is the job of NetworkPolicy and the network plugin.
- It terminates TLS for all traffic that is sent to a Service address, so the backing Pods only ever see plain connections.