| KKP Users |
/ |
Master Ingress Controller |
Any |
443* |
Access to KKP Dashboard |
| Master Cluster nodes |
KKP Operator |
Seed cluster Kubernetes API |
Any |
6443* |
Operator access |
| Master Cluster nodes |
Kubermatic API |
Seed cluster Kubernetes API |
Any |
6443* |
Operator access |
| Master cluster nodes |
Kubermatic API |
Seed cluster nodeport-proxy |
Tunneling |
6443 |
Access to User Cluster API Endpoints |
| Master cluster nodes |
Kubermatic API |
Seed cluster nodeport-proxy |
NodePort |
30000-32767** |
Access to User Cluster API Endpoints |
| Master cluster nodes |
Kubermatic API |
Seed cluster nodeport-proxy |
LoadBalancer |
30000-32767** |
Access to User Cluster API Endpoints |
| Seed cluster nodes |
Seed controller manager |
Cloud Provider API |
Any |
provider specific |
Cloud provider api access |
| User cluster nodes |
Kubelet/ Konnectivity/ in-cluster api |
Seed cluster nodeport-proxy |
Tunneling |
6443, 8088 |
Access to User Cluster API Endpoints and Konnectivity |
| User cluster nodes |
Kubelet/ Konnectivity/ in-cluster api |
Seed cluster nodeport-proxy |
NodePort |
30000-32767** |
Access to User Cluster API Endpoints and Konnectivity |
| User cluster nodes |
Kubelet/ Konnectivity/ in-cluster api |
Seed cluster nodeport-proxy |
LoadBalancer |
30000-32767** |
Access to User Cluster API Endpoints and Konnectivity |
| KKP Users |
/ |
Seed cluster nodeport-proxy |
Tunneling |
6443 |
Access to User Cluster API Endpoints |
| KKP Users |
/ |
Seed cluster nodeport-proxy |
NodePort |
30000-32767** |
Access to User Cluster API Endpoints |
| KKP Users |
/ |
Seed cluster nodeport-proxy |
LoadBalancer |
30000-32767** |
Access to User Cluster API Endpoints |