 unsecured. Neither the kubelet or the Kubernetes node typically have their own cryptographic identity, so access control isn&rsquo;t possible. It&rsquo;s not enough to simply allow all traffic through on the health probe port, as malicious traffic could use that port just as easily as the kubelet could. In addition, many apps use the same port for health probes and legitimate application traffic, so simple port-based allows are unacceptable.</p><p>Various CNI implementations solve this in different ways an