Cluster-proxy-addon is a Red Hat multicluster component that relays requests between a hub cluster and managed clusters. In practice, it acts as a proxy layer that helps operators reach services in remote clusters without exposing those services directly.
This matters because any proxy that can reach private cluster resources becomes a security boundary. If request targets, paths, or headers are not tightly validated, an attacker may abuse the proxy for server-side request forgery (SSRF) or reach internal services that should stay isolated. Defenders should treat the component like control-plane infrastructure: restrict public exposure, verify which destinations are allowed, review logs for unusual upstream targets, and keep network policies and RBAC aligned with the intended trust model.