How does the default nginx ingress controller become available on ports 80 and 443 on worker nodes? I was under the impression it uses a node port service but I can’t find that so looks like I am wrong.

hostPort

on the controller pod itself:

> kubectl get po rke2-ingress-nginx-controller-vr2md -n kube-system -o yaml | grep -E -i '80|443' 

    - containerPort: 80
      hostPort: 80
    - containerPort: 443
      hostPort: 443