DataONEorg / k8s-cluster

Documentation on the DataONE Kubernetes cluster
Apache License 2.0
2 stars 1 forks source link

Move K8s API server from port 6443 to 443 #40

Open nickatnceas opened 9 months ago

nickatnceas commented 9 months ago

Per https://kubernetes.io/docs/concepts/security/controlling-access/, we should move API server access from 6443 to 443 on dev and prod clusters. This will also allow us to stop requiring firewall rules as part of the login authorization process.

By default, the Kubernetes API server listens on port 6443 on the first non-localhost network interface, protected by TLS. In a typical production Kubernetes cluster, the API serves on port 443.