so i suspect that in order for the control plane to see the worker nodes' pods, it must know how to reach them via VPC configuration like its route table