Is there way to access Kubernetes (K8s) API in IFS middle-ware server Kubernetes cluster , look like currently this is not possible access from outside.
Hi Nuwan,
Are you referring to directly executing Kubernetes commands such as “kubectl get pods”? Being able to run these commands externally is a serious security issue because other commands can alter and delete objects in the cluster.
A VPN tunnel could be used to facilitate such access. This would also be a much safer option than exposing your cluster externally. If security is not a concern and you are only wondering technically, I would expect a combination of routing and port forwards to be sufficient in enabling such external access. Depending on the network some firewall rules may also need to be altered. Please check with your network administrator for further details.
Best regards -- Ben
The restriction is in the firewall - if you want to open up for a specific additional IP or range it can be done by configuring the firewall in the main-config.json. If you feel wild and crazy you can always disable the firewall :) IFS always recommend it’s on and restrict as much access as possible of course!
Thank you @Ben Monroe and @hhanse for replies . Our requirement is for monitoring I know we have Grafana for that , but we are looking in to other options , we are looking in to access the Kubernetes cluster from outside via The Kubernetes API rest calls
Reply
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.