# You install Cilium with kubeProxyReplacement=true on a cluster without kube-proxy. Why do you have to set k8sServiceHost and k8sServicePort?

Cilium, Hard (Expert), Architecture. https://k8wiz.com/uquiz/you-install-cilium-with-kubeproxyreplacementtrue-on-a-cluster-without-kube-proxy-why-do-you-have-to-set-k8sservicehost-and-k8sse

- A. They set the address and port that Hubble Relay listens on
- B. They are only needed when ClusterMesh connects other clusters
- C. They tell the agents which node runs the Cilium operator
- D. Without kube-proxy, the agent can't reach the API server via its ClusterIP

**Answer:** Without kube-proxy, the agent can't reach the API server via its ClusterIP

**Explanation:** Pods normally reach the API server through the kubernetes Service ClusterIP, which kube-proxy translates. Without kube-proxy, Cilium does that translation itself, but the agent has to talk to the API server before its datapath is ready. Pointing it at the real API server address or load balancer solves this bootstrap problem.