Question

A development team has a backend API running as a Deployment named `orders-api` in the `commerce` namespace. The API only needs to be reachable by other Pods inside the cluster (a frontend Deployment and a batch worker), and must NOT be exposed to any external network or node IP. The team asks you to create a Service that provides a stable virtual IP and DNS name for in-cluster access while minimizing the attack surface. Which Service type should you use?

Accepted Answer

ClusterIP — the default type, which allocates an internal virtual IP reachable only from within the cluster

Answer

NodePort — so the API is reachable on a static port across all node IPs for internal callers

Answer

LoadBalancer — to provision a cloud load balancer that other Pods connect to through its external IP

Answer

ExternalName — to map the Service to an external DNS name for internal Pods to resolve