From the course: Kubernetes Network and Cluster Hardening by Pearson
Unlock this course with a free trial
Join today to access over 25,200 courses taught by industry experts.
Network security overview - Kubernetes Tutorial
From the course: Kubernetes Network and Cluster Hardening by Pearson
Network security overview
Understanding network security within the Kubernetes environment is something that is fairly straightforward, but there are some nuances in the way that Kubernetes operates that you should be aware of. First thing is around internal communications. Now internal communications is everything from pod-to-pod communications, which is that direct access across various pods to be able to communicate to each other as well as across nodes, and typically you're also going to have a unique cluster-wide IP address per pod. Now there could be multiple containers in a pod, but they will have one unique cluster-wide IP address. You then also have the concept of service to pod. Now service is a way to be able to provide a static IP address where you have multiple pods that are in a dynamic state. In other words, they're gonna get various IP addresses assigned to them. This allows you to be able to have one address that can then represent all the pods behind it and that's what the service is about…