-
Book Overview & Buying
-
Table Of Contents
-
Feedback & Rating

Hands-on Kubernetes on Azure, Third Edition
By :

This section serves as an introduction to the concepts of networking and security in AKS. You'll first cover the control plane, then workload networking, and then network security.
The control plane of a Kubernetes cluster is the infrastructure that hosts the Kubernetes API server for your cluster, manages the scheduler, and stores the cluster state. When you interact with a Kubernetes cluster, for instance, by using kubectl
, you are sending commands to the Kubernetes API server. In AKS, this control plane is managed by Microsoft and provided to you as a service.
By default, the control plane is exposed over the internet and is accessible to everybody that is connected to the internet. This doesn't mean that the control plane is not secure though. Even if an attacker had network access to your control plane, they would still need to have cluster credentials to execute commands against the control plane...