...
| port | protocol | incoming/outgoing | application | source | destination | Notes |
|---|---|---|---|---|---|---|
| 22 | ssh | ssh | developer vm | host | ||
| 443 | tiller | client | host | |||
| 8880 | http | rancher | client | host | ||
| 9090 | http | kubernetes | host | |||
| 10001 | https | nexus3 | nexus3.onap.org | |||
| 10003 | https | nexus3 | nexus3.onap.org | |||
| https | nexus | nexus.onap.org | ||||
https ssh | git | git.onap.org | ||||
| 30200-30399 | http/https | REST api | developer vm | host | ||
| 5005 | tcp | java debug port | developer vm | host | ||
| Lockdown ports | ||||||
| 8080 | outgoing | |||||
| 10250-10255 | in/out | Lock these down via VPC or a source CIDR that equals only the server/client IP list https://medium.com/handy-tech/analysis-of-a-kubernetes-hack-backdooring-through-kubelet-823be5c3d67c |
Azure
AWS
Software Profile
Rancher 1.6.14
...