Harden a single-node k3s cluster on a VPS
What a fresh k3s install leaves open on a VPS: port 6443, the kubelet on 10250, kubeconfig mode, NodePorts your firewall never sees, and privileged pods.
Filtering by topic #kubernetes · clear
What a fresh k3s install leaves open on a VPS: port 6443, the kubelet on 10250, kubeconfig mode, NodePorts your firewall never sees, and privileged pods.
Port 10250 is the kubelet API. Fix the address already in use error on kubeadm init, and the firewall drops that break kubectl logs and exec.
k3s puts the real Kubernetes API on one VPS. What it costs in RAM, why port 80 collides at install, and when Docker Compose is still the right answer.