1. Security Group for Master Nodes

Name: K8s-Master-SG

Ibound Rules*:*

These rules allow the master nodes to communicate with the worker nodes and external services securely.

Outbound Rules:

Allow all outbound traffic (0.0.0.0/0) unless specific restrictions apply.

---

2. Security Group for Worker Nodes

Name: K8s-Worker-SG

Inbound Rules:

These rules enable the worker nodes to communicate with the master nodes and handle external traffic.

Outbound Rules:

Allow all outbound traffic (0.0.0.0/0) unless specific restrictions apply.

---

Explanation of Key Ports

1. 6443: Kubernetes API server port, used by worker nodes to communicate with the master.

2. 2379-2380: Ports for etcd, the key-value store used by Kubernetes.

3. 10250: Port for Kubelet API, used for control plane to node communication.

4. 10251: Kube-scheduler listens on this port for leader election.

5. 10252: Controller-manager listens on this port for leader election.

6. 30000-32767: Kubernetes services exposed via NodePort use these ports.

---

Best Practices

1. Restrict SSH Access
   Only allow SSH access from trusted IP addresses to improve security.

2. Minimize External Access
   Limit external access to only necessary ports (e.g., for NodePort services or LoadBalancer).

3. VPC and Subnet
   Ensure that both master and worker nodes are in the same VPC and use private subnets for internal communication.

   ---

   Thanks for spending your valuable time in learning to enhance your knowledge!😃🙏

   ---

   Share this with your colleagues and friends! ➤🤝

   ---

   𝗙𝗼𝗹𝗹𝗼𝘄 𝗺𝗲🔗╰┈➤

   Hashnode: kshitijaa.hashnode.dev

   LinkedIn: kshitija-bartakke-malwade

   ---