Containers & cloudTCP 6443, 10250 Encrypted
Port 6443, 10250: Kubernetes
Kubernetes API server and kubelet
6443 is the cluster API server; 10250 is the kubelet API on each node.
How attackers abuse it
- Anonymous or over-privileged access to the API server.
- Exposed kubelets allowing command execution in pods.
How to defend it
- Disable anonymous auth; RBAC with least privilege.
- Keep control-plane and kubelet ports off the internet.
Exam tip
RBAC and network policies are the core Kubernetes access controls.