Kubernetes and Cloud Native Associate (KCNA)Kubernetes FundamentalsMedium
A security auditor is reviewing the architecture of a Kubernetes cluster. They observe that the `kube-apiserver` component is running and accessible. Which of the following statements accurately describes the primary function of the `kube-apiserver` in a Kubernetes cluster?
- AIt is the front end for the Kubernetes control plane, exposing the API.
- BIt maintains the desired state of objects in the cluster.
- CIt runs on each worker node to ensure containers are running in Pods.
- DIt is responsible for scheduling Pods onto worker nodes.
Show answer & explanationAnswer & explanation
Correct answer: A. It is the front end for the Kubernetes control plane, exposing the API.
The `kube-apiserver` is the central component of the Kubernetes control plane. It exposes the Kubernetes API, which is used by all other control plane components and by users to interact with the cluster.
Why the other options are wrong
- B. This is a broader function of the control plane as a whole, with the `kube-controller-manager` playing a key role in maintaining desired state.
- C. This is the primary function of the `kubelet`.
- D. This is the primary function of the `kube-scheduler`.
kube-apiserver
The `kube-apiserver` is the main component of the Kubernetes control plane. It exposes the Kubernetes API and serves as the front end for the entire cluster, handling all communication.
- Validates and configures API objects (Pods, Services, etc.).
- Provides the interface to the cluster's shared state (etcd).
- All communication between other control plane components and between users and the cluster goes through it.
Memory trick: API Server Answers All Accesses