...
- assume the user has downloaded the 'kubeConfig' file on local laptop, a 'kubenetes' management software can be used to point to the proxy server of 'localhost:9001'. The kubeConfig remote API server address in this case is the real remote IP address: 10.1.0.2, and that is inside the certificate the API server uses.
The reason this 'proxy is ' being part of the TCP command is that, the 'proxy' service is only for one port 9001 here, the others can still be used for regular TCP channel for SSH service and others.
...