The module deletes the entire kubeadm kube-proxy set (DaemonSet, ConfigMap, RBAC) and installs its own.

For security reasons, for NodePort services, connections are only allowed to the nodes’ InternalIP by default. You can lift this restriction using the "false" annotation.

Here is an example of a NodeGroup annotation:

kind: NodeGroup
  name: myng
    annotations: "false"

Note! Following the addition, deletion, or changing the annotation, you have to restart kube-proxy Pods manually.

Note! The kube-proxy module is automatically disabled when the cni-cilium module is enabled.