Skip to content
This repository was archived by the owner on Feb 5, 2020. It is now read-only.

Commit a3dcf33

Browse files
committed
Documentation: add network requirements for etcd
1 parent 7acb18e commit a3dcf33

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

Documentation/generic-platform.md

+3
Original file line numberDiff line numberDiff line change
@@ -28,6 +28,8 @@ Master nodes run most, if not all, control plane components including the API se
2828
- Egress
2929
- MUST have 443 to download gcr, quay, and docker hub images
3030
- MAY have 2379 to external etcd cluster
31+
- MAY allow 2379-2380 for self-hosted etcd pods if using experimental etcd operator
32+
- MAY allow 12379-12380 for temporary etcd pod if using experimental etcd operator
3133

3234
- **Access Control**
3335
- MUST have any necessary API access for k8s cloud plugin functionality (i.e. AWS node IAM Role)
@@ -64,6 +66,7 @@ Worked nodes run all of the user applications. The only component they must run
6466
- SHOULD allow port 10250 from masters for k8s features: port-forward, exec, proxy
6567
- SHOULD allow port 9100 from masters & workers for: Prometheus Node Exporter metrics
6668
- SHOULD allow port 4194 from masters for: Heapster connections to CAdvisor
69+
- MAY allow 2379-2380 for self-hosted etcd pods if using experimental etcd operator
6770

6871
- **Egress**
6972
- MUST have 443 to download gcr, quay, and docker hub images

0 commit comments

Comments
 (0)