Skip to content

Instantly share code, notes, and snippets.

@bharatmicrosystems

bharatmicrosystems/firewall.csv

Last active April 12, 2020 21:56
Show Gist options
  • Save bharatmicrosystems/4492bcdf212d040fd2b79c1a009ee7cd to your computer and use it in GitHub Desktop.
Save bharatmicrosystems/4492bcdf212d040fd2b79c1a009ee7cd to your computer and use it in GitHub Desktop.
Download ZIP
Raw
firewall.csv
Description Source Target Ports Direction
Trusted Clients to Bastion Host Trusted Internet IP Range Bastion Host tcp:22 Ingress
Bastion Host to all nodes Bastion Host All Nodes tcp:22 Ingress
Trusted Clients, Master and Worker Nodes to API Server Load Balancer Trusted Internet IP Range, Master and Worker Nodes Load Balancer tcp:6443 Ingress
API Server Load Balancer to Master Nodes Load Balancer Master Nodes tcp:6443 Ingress
Master Nodes to ETCD Load Balancer Master Nodes ETCD Load Balancer tcp:2379 Ingress
ETCD Load Balancer to ETCD Nodes ETCD Load Balancer ETCD Nodes tcp:2379 Ingress
ETCD Nodes to ETCD Nodes ETCD Nodes ETCD Nodes tcp:2379-2380 Ingress
API Servers to Kubelet on Worker Nodes Master Nodes Worker Nodes tcp:10250 Ingress
Load Balancer and Master Nodes to Worker NodePorts Load Balancer and Master Nodes Worker Nodes tcp:30000-32767 Ingress
Weavenet CNI Plugin to its peers on Worker Nodes Worker Nodes Worker Nodes tcp:6781-6783, udp:6783-6784 Ingress
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment