Port 6443 (Kubernetes API server)
The control-plane API of a Kubernetes cluster.
- Transport
- TCP
- Internet exposure
- Restrict
Expose only to specific networks, or behind a VPN.
Security notes
- Anonymous or over-privileged access gives control of every workload.
- Restrict to administrators and CI, with strong authentication.
When it shows up in your logs
Requests from unknown IPs, or anonymous requests, deserve immediate attention.