Port 10250 (Kubernetes kubelet API)
API of the kubelet agent on each Kubernetes node.
- Transport
- TCP
- Internet exposure
- Never expose
Should not be reachable from the internet.
Security notes
- Anonymous kubelet access allows running commands in any pod on the node.
When it shows up in your logs
Connections to 10250 from outside the cluster are suspicious.