Kubernetes and Cloud Native Associate (KCNA)Kubernetes FundamentalsMedium
A security auditor is reviewing the architecture of a Kubernetes cluster. They observe that a critical component is responsible for storing the cluster's state, configuration, and metadata, acting as the cluster's single source of truth. Which component are they referring to?
- Aetcd
- Bkube-scheduler
- Ckubelet
- Dkube-proxy
Show answer & explanationAnswer & explanation
Correct answer: A. etcd
etcd is a distributed, consistent, and highly-available key-value store used by Kubernetes to persistently store all cluster data, including configuration, state, and metadata. It is the single source of truth for the cluster.
Why the other options are wrong
- B. kube-scheduler is for Pod placement, not data storage.
- C. kubelet runs on worker nodes and manages Pods, not central data storage.
- D. kube-proxy maintains network rules for Services, not cluster state storage.
etcd
etcd is a distributed reliable key-value store used by Kubernetes as its backing store for all cluster data. It is critical for the cluster's operational state.
- Stores cluster state, configuration, and metadata.
- Distributed and highly available.
- Single source of truth for the Kubernetes cluster.
Memory trick: etcd is the 'Encyclopedia' of the cluster's 'Everything'.