Cilium
Hard
Architecture
In Cilium's default cluster-pool IPAM mode, what assigns each node its pod CIDR?
Select your answer:
Show answer and explanation
Answer: The Cilium operator, which records it in the node's CiliumNode resource
Explanation
In cluster-pool mode the operator splits clusterPoolIPv4PodCIDRList into per-node blocks and writes them to each CiliumNode. The agent then hands out pod IPs from its block. The 'kubernetes' IPAM mode uses spec.podCIDR from kube-controller-manager instead, and cloud modes such as ENI or Azure take IPs from the provider.
More hard Cilium questions
- What is the purpose of Cilium's egress gateway feature?
- What is the purpose of Cilium's 'prefilter' feature?
- In Cilium's tunnel mode (VXLAN or Geneve), how does the receiving node learn the security identity of a packet sent by a pod on another node?
- A CiliumNetworkPolicy contains HTTP rules, such as allowing only GET requests to /api. Which component enforces those rules?
- How does a client experience a request blocked by an L3/L4 Cilium policy, compared with one blocked by an L7 HTTP rule?
- With Cilium's default policy enforcement mode, when does a pod go from allowing all ingress traffic to denying everything that isn't explicitly allowed?