A telemetry agent exposes a proprietary TCP protocol on port 7000 and must be reachable from outside the cluster. Why is a standard Ingress rule a poor primary choice?
Select an answer to reveal the explanation.
Short Explanation
Ingress is an HTTP concierge, not a generic TCP tunnel. For a weird binary protocol on 7000, look at NodePort, LoadBalancer, or other TCP options instead of forcing Ingress rules.
Full Explanation
Classic Ingress routes HTTP and HTTPS. Arbitrary TCP protocols are outside that core model (some controllers offer vendor TCP/UDP CRDs or configs, but that is not the portable Ingress rule surface). Application developers should choose Service types such as NodePort or LoadBalancer—or platform TCP routes—when exposing non-HTTP workloads.