diff --git a/pentesting/pentesting-kubernetes/pentesting-kubernetes-from-the-outside.md b/pentesting/pentesting-kubernetes/pentesting-kubernetes-from-the-outside.md index c51a33fb..715393b1 100644 --- a/pentesting/pentesting-kubernetes/pentesting-kubernetes-from-the-outside.md +++ b/pentesting/pentesting-kubernetes/pentesting-kubernetes-from-the-outside.md @@ -18,21 +18,21 @@ It might be useful for you to understand how Kubernetes can **expose services pu The following ports might be open in a Kubernetes cluster: -| Port | Process | Description | -| ----------- | -------------- | ---------------------------------------------------------------------- | -| 443/TCP | kube-apiserver | Kubernetes API port | -| 2379/TCP | etcd | | -| 6666/TCP | etcd | etcd | -| 4194/TCP | cAdvisor | Container metrics | -| 6443/TCP | kube-apiserver | Kubernetes API port | -| 8443/TCP | kube-apiserver | Minikube API port | -| 8080/TCP | kube-apiserver | Insecure API port | -| 10250/TCP | kubelet | HTTPS API which allows full mode access | -| 10255/TCP | kubelet | Unauthenticated read-only HTTP port: pods, running pods and node state | -| 10256/TCP | kube-proxy | Kube Proxy health check server | -| 9099/TCP | calico-felix | Health check server for Calico | -| 6782-4/TCP | weave | Metrics and endpoints | -| 30000-32767 | NodePort | Proxy to the servicen | +| Port | Process | Description | +| --------------- | -------------- | ---------------------------------------------------------------------- | +| 443/TCP | kube-apiserver | Kubernetes API port | +| 2379/TCP | etcd | | +| 6666/TCP | etcd | etcd | +| 4194/TCP | cAdvisor | Container metrics | +| 6443/TCP | kube-apiserver | Kubernetes API port | +| 8443/TCP | kube-apiserver | Minikube API port | +| 8080/TCP | kube-apiserver | Insecure API port | +| 10250/TCP | kubelet | HTTPS API which allows full mode access | +| 10255/TCP | kubelet | Unauthenticated read-only HTTP port: pods, running pods and node state | +| 10256/TCP | kube-proxy | Kube Proxy health check server | +| 9099/TCP | calico-felix | Health check server for Calico | +| 6782-4/TCP | weave | Metrics and endpoints | +| 30000-32767/TCP | NodePort | Proxy to the services | ### Kube-apiserver