Required Ports for Kubernetes Cluster

Question

Suppose I want to create a k8s cluster on bare metal servers with 1 master and 2 nodes. What ports should I open in my firewall so that the master and hosts can communicate over the Internet? (I know that I can just use a VPN, but I just want to know which ports I need). I probably need at least the following ports. Do I need more? How about if I use Flannel or Calico? I want to create a complete list of all possible k8s services and necessary ports. Thank.

kubectl - 8080

ui - 80 or 443 or 9090

etcd - 2379, 2380

Answer 1

ports for the kubernetes are as follows:

CoreOS docs.

Answer 2

:

node (s):

TCP     6443*       Kubernetes API Server
TCP     2379-2380   etcd server client API
TCP     10250       Kubelet API
TCP     10251       kube-scheduler
TCP     10252       kube-controller-manager
TCP     10255       Read-Only Kubelet API

():

TCP     10250       Kubelet API
TCP     10255       Read-Only Kubelet API
TCP     30000-32767 NodePort Services

Answer 3

, API, etcd, , , VPN, :

• 6443 ( 8080, TLS )

  API (kubelet, kube-proxy, pods) (kubectl,...)

• 10250 ( !)

  Kubelet API (master).

, , Kubernetes (, , ,...)

NodePort Ingress, .