Reorganize node requirements (#1920)

* Reorganize node requirements

* Cherry pick 'Fix links' commit

* Cherry pick 'Link to RKE port requirements for each node in Rancher docs'

* Fix merge conflict errors

* Delete page that was moved elsewhere

* Delete section that was included elsewhere

* Re-add port requirements for custom nodes

* Rearrange pages

* Change wording of note in Rancher installation requirements

* Fix links

* Edit links

* Edit links

* Replace user cluster requirements page

* Fix typo

* Fix link to imported cluster requirements

* Revise node requirements

* Add mini TOC for port requirements

* Remove alias for port requirements page
This commit is contained in:
Catherine Luse
2019-11-05 11:23:09 -08:00
committed by Denise
parent 45d128bedb
commit 65e52ec86b
14 changed files with 406 additions and 232 deletions
@@ -1,59 +0,0 @@
<div>
<p><strong>Rancher nodes:</strong><br/>Nodes running the <code>rancher/rancher</code> container</p>
<h3>Rancher nodes - Inbound rules</h3>
<table>
<tr>
<th>Protocol</th>
<th>Port</th>
<th align="left">Source</th>
<th align="left">Description</th>
</tr>
<tr>
<td>TCP</td>
<td>80</td>
<td><ul><li>Load balancer/proxy that does external SSL termination</li></ul></td>
<td>Rancher UI/API when external SSL termination is used</td>
</tr>
<tr>
<td>TCP</td>
<td>443</td>
<td><ul><li>etcd nodes</li><li>controlplane nodes</li><li>worker nodes</li><li>Hosted/Imported Kubernetes</li><li>any that needs to be able to use UI/API</li></ul></td>
<td>Rancher agent, Rancher UI/API, kubectl</td>
</tr>
</table>
<h3>Rancher nodes - Outbound rules</h3>
<table>
<tr>
<th>Protocol</th>
<th>Port</th>
<th align="left">Destination</th>
<th align="left">Description</th>
</tr>
<tr>
<td>TCP</td>
<td>22</td>
<td><ul><li>Any node IP from a node created using Node Driver</li></td>
<td>SSH provisioning of nodes using Node Driver</td>
</tr>
<tr>
<td>TCP</td>
<td>443</td>
<td><ul><li>35.160.43.145/32</li><li>35.167.242.46/32</li><li>52.33.59.17/32</li></td>
<td>git.rancher.io (catalogs)</td>
</tr>
<tr>
<td>TCP</td>
<td>2376</td>
<td><ul><li>Any node IP from a node created using Node Driver</li></td>
<td>Docker daemon TLS port used by Docker Machine</td>
</tr>
<tr>
<td>TCP</td>
<td>6443</td>
<td><ul><li>Hosted/Imported Kubernetes API</li></td>
<td>Kubernetes apiserver</td>
</tr>
</table>
<br/>
</div>