Open-data portal ops wonders whether worker nodes need a public internet VIP for the API or only private reachability. What is required?
Select an answer to reveal the explanation.
Short Explanation
Workers need a reliable private line to the API front desk—not a billboard on the public internet. Reach the control-plane endpoint over your civic network. Publishing kubelets or worker IPs to the world is unnecessary for that.
Full Explanation
Cluster nodes must communicate with the Kubernetes API server endpoint over a path the environment provides—often a private VIP or internal load balancer. Public internet exposure of the API or of kubelets is not a Kubernetes requirement for workers to function. Binding the API only to localhost without another reachable endpoint prevents remote kubelets from joining normally.