Skip to content
This repository has been archived by the owner on Feb 9, 2024. It is now read-only.

Commit

Permalink
Backport of #471. (#546)
Browse files Browse the repository at this point in the history
Kubernetes by default has the range of 30000-32767 for `NodePort` assignment. However, it is not appropriate to ensure (and fail the install) if something is bound within this range, because Kubernetes will actually only choose open ports when assigning a `NodePort`. Additionally, this range can be changed via configuration, so hardcoding verification of it being unused with no way of changing it is problematic.

It would be great to backport this to 5.5.x as well, as currently we have to maintain a fork of Gravity.

See also https://community.gravitational.com/t/port-usage-and-verification/163/3
  • Loading branch information
a-palchikov authored Jul 29, 2019
1 parent 0607cc0 commit 21732ec
Showing 1 changed file with 0 additions and 1 deletion.
1 change: 0 additions & 1 deletion lib/checks/checks.go
Original file line number Diff line number Diff line change
Expand Up @@ -891,7 +891,6 @@ func defaultPortChecker(options *validationpb.ValidateOptions) health.Checker {
{Protocol: "tcp", From: 4001, To: 4001, Description: "etcd"},
{Protocol: "tcp", From: 7001, To: 7001, Description: "etcd"},
{Protocol: "tcp", From: 6443, To: 6443, Description: "kubernetes API server"},
{Protocol: "tcp", From: 30000, To: 32767, Description: "kubernetes internal services range"},
{Protocol: "tcp", From: 10248, To: 10255, Description: "kubernetes internal services range"},
{Protocol: "tcp", From: 5000, To: 5000, Description: "docker registry"},
{Protocol: "tcp", From: 3022, To: 3025, Description: "teleport internal SSH control panel"},
Expand Down

0 comments on commit 21732ec

Please sign in to comment.