PORT | SERVICE | ACCESS RESTRICTIONS |
16443 | API server | SSL encrypted. Clients need to present a valid password from a Static Password File. |
10250 | kubelet | Anonymous authentication is disabled. X509 client certificate is required. |
10255 | kubelet | Read only port for the Kubelet. |
25000 | cluster-agent | Proper token required to authorise actions. |
12379 | etcd | SSL encrypted. Client certificates required to connect. |
10257 | kube-controller | Serve HTTPS with authentication and authorization. |
10259 | kube-scheduler | Serve HTTPS with authentication and authorization. |
19001 | dqlite | SSL encrypted. Client certificates required to connect. |
4789/udp | calico | Calico networking with VXLAN enabled. |