Kubernetes Networking

What the CNI Decides

Two clusters, same Kubernetes version, same manifests. Pod to pod traffic behaves differently in each. Nothing in the Kubernetes documentation explains why, because the difference is not in Kubernetes.

What this lesson covers

  • The CNI specification and what it actually standardises
  • What a plugin does when a pod is created: IPAM, interface creation, route setup
  • The decisions left open: encapsulation or native routing, dataplane technology, policy enforcement
  • How far beyond the minimum a given plugin chooses to go, and why plugins differ so widely in scope

What is actually happening

Coming soon.

The Kubernetes model versus the CNI's choice

Coming soon.

How it works in practice

Coming soon.

Common failure modes

Coming soon.

What people get wrong

Coming soon.

INTERVIEW QUESTION

Walk through what a CNI plugin does when a pod is created. Which of its behaviours are required by the specification and which are the plugin's own choice?