Disable insecure port in kube-apiserver (bsc#1121148) - Githubissues

SUSE / caasp-salt

A collection of salt states used to provision a kubernetes cluster

Apache License 2.0

64 stars 29 forks source link

Disable insecure port in kube-apiserver (bsc#1121148) #735

Closed drpaneas closed 5 years ago

drpaneas commented 5 years ago

Fixes bnc#1121148 - Critical Security issue for KubeAPI Insecure API port exposed to all Master Node guest containers

In older versions of Kubernetes, you could run kube-apiserver with an API port that does not have any protections around it.

This PR disables insecure port by passing the --insecure-port=0

In recent versions, this has been disabled by default with the intention of completely deprecating it

(cherry picked from commit 01d91482e9a84b05b3b6eaec6a94b7b19ee74ee4)