Port 2379

What is port 2379?

Port 2379 is the client API port for etcd, the distributed key-value store that Kubernetes uses to persist all cluster state including deployments, secrets, and configuration. An exposed etcd instance without authentication allows an attacker to read all Kubernetes secrets and write arbitrary cluster state, effectively giving full control of the cluster. etcd must be completely isolated from all untrusted networks.