In this sense, I understand the encryption needed between say client and server and all communications that are external.
But for a scenario where for all VMs are in the same VPC and not exposed to the external world... Is VM-to-VM communication necessary here with TLS? For eg an entire Kubernetes cluster has all its worker and control plane VMs in the same VPC and none of them are externally exposed, then why communication between them and between pods needs to be encrypted?
For this, the attacker must first have access to the network, right? What are the kinds of attacks that can happen?
Yes, I know this probably has a straightforward and obvious answer. Sorry for the noob question. Whenever I try searching for this, I see everywhere talks about how to do this. But I still could not understand why it is needed.