Kube-proxy

• https://kubernetes.io/docs/concepts/overview/components/#kube-proxy run on Kubernetes nodes to maintains network rules.
• Snap install Kubernetes: snap install kube-proxy --classic

EKS

• kubectl get pods -n kube-system
• ktail -n kube-system kube-proxy

kubectl describe configmaps -A | grep -w Name
Name:         kube-proxy
Name:         kube-proxy-config
Name:         kube-root-ca.crt

Describe:

• kubectl -n kube-system describe configmaps kube-proxy
• kubectl -n kube-system describe configmaps kube-proxy-config
• kubectl -n kube-system describe configmaps kube-root-ca.crt

Edit:

• kubectl -n kube-system edit cm kube-proxy

 cluster_addons = {
   coredns = {
     preserve    = true
     most_recent = true

     timeouts = {
       create = "25m"
       delete = "10m"
     }
   }
   kube-proxy = {
     most_recent = true
   }
   vpc-cni = {
     most_recent = true
   }
   aws-ebs-csi-driver = {
     most_recent = true
   }
 }

Logs

"Adding new service port" ...
"Serviced updated port"

News

• K8s v1.31 (Aug 2024) Improved ingress connectivity reliability for kube-proxy
• v1.31 (Aug 2024) Beta: nftables backend for kube-proxy

Related terms

• kubectl proxy
• EKS add-ons
• Kubernetes log files: /var/log/kube-proxy.log
• coredns
• kube-system
• --hostname-override
• IPAM
• kubeproxy.config.k8s.io

See also

• kube-proxy: kubectl proxy, kubectl proxy --help, 8001, Kubernetes API, https localhost 8001, kubectl port-forward
• Terraform EKS addons: coredns, kube-proxy, vpc-cni, aws-ebs-csi-driver
• Kubernetes networking networking.k8s.io: network policies, Network Policy Providers, CNI, Calico, flannel, Service mesh, Istio, kube-proxy, coredns, AWS VPC CNI: vpc-cni, Kubernetes: Ingress controllers, IPVS, ServiceTypes: LoadBalancer, ClusterIP, NodePort, ExternalName, Endpoints, EndpointSlices, Kubernetes DNS, svc.cluster.local, Weave Net, Cilium, Traefik, GKE Dataplane V2

https://kubernetes.io/blog/2024/08/13/kubernetes-v1-31-release/#improved-ingress-connectivity-reliability-for-kube-proxy