03/27/2023, 3:57 PM
Hi @clean-ghost-11464, can you please help me find the answer to my question? Our team is working on the SDL review of our project which is based on Rancher. We found that cattle-cluster-agent opens two ports on the downstream cluster: 80 and 443, but we can't figure out what is the client that uses these ports, what's their usage. We use Rancher v2.7, Kubernetes Version: v1.24.10, RKE2 v1.24.9+rke2r2. Cluster Type: Downstream - 1 node with three roles: etcd, cp and worker. The downstream K8s cluster is installed on Ubuntu 22.04 VM via Rancher. I haven't found any architecture diagrams/videos/documents that explain use of these ports by the cattle-cluster-agent. Maybe it is a trivial question, I just don't find any document that answers it straight and could only try to guess based on the code. Your help would be greatly appreciated.
root@rancl:~# kubectl get services -n cattle-system -o wide
NAME                   TYPE        CLUSTER-IP      EXTERNAL-IP   PORT(S)          AGE   SELECTOR
cattle-cluster-agent   ClusterIP   <none>        80/TCP,443/TCP   31d   app=cattle-cluster-agent