CODEWITHSUNDEEP
google-cloud-platformgoogle-kubernetes-enginegke-networking
gagan
gagan

Reputation: 355

Can we open port to allow traffic from GKE master?

GKE master runs in HA mode and the VM is not visible in VM instances page either. Is it possible to allow traffic on GKE master by opening more ports except 443 which already open for k8s API.

Upvotes: 3

Views: 1577

Answers (1)

Mr.KoopaKiller
Mr.KoopaKiller

Reputation: 3962

GKE is a managed cluster and you cannot perform modifications on master nodes. The control planes is not visible in VM instances and all interactions must be made using kubectl.

The master is the unified endpoint for your cluster. All interactions with the cluster are done via Kubernetes API calls, and the master runs the Kubernetes API Server process to handle those requests. You can make Kubernetes API calls directly via HTTP/gRPC, or indirectly, by running commands from the Kubernetes command-line client (kubectl) or interacting with the UI in the Cloud Console.

In fact, I can't see a reason to change firewall rules in the control planes, since all your workload, including services and ingress will runs in the node pools.

References:

https://cloud.google.com/kubernetes-engine/docs/concepts/cluster-architecture

Upvotes: 3

Related Questions