Stop exposing a non-TLS port on the Shuffler.
We have been exposing two non-TLS ports on the Shuffler:
Port 5001 on the Shuffler process itself and port 8000
on endpoints. This removes both of those.
Change-Id: I26cfee099f68c95a88e405d5d4547efc1e5e2fd0
diff --git a/kubernetes/report_master/report_master_deployment.yaml b/kubernetes/report_master/report_master_deployment.yaml
index 5b8a8ae..a273167 100644
--- a/kubernetes/report_master/report_master_deployment.yaml
+++ b/kubernetes/report_master/report_master_deployment.yaml
@@ -41,7 +41,6 @@
'-a', 'grpc://127.0.0.1:7000'
]
ports:
- - containerPort: 8000
- containerPort: 443
volumeMounts:
- mountPath: /etc/nginx/ssl
diff --git a/kubernetes/shuffler/shuffler_deployment.yaml b/kubernetes/shuffler/shuffler_deployment.yaml
index bfc16eb..2a5ae5f 100644
--- a/kubernetes/shuffler/shuffler_deployment.yaml
+++ b/kubernetes/shuffler/shuffler_deployment.yaml
@@ -32,14 +32,12 @@
- name: endpoint
image: gcr.io/endpoints-release/endpoints-runtime:1
args: [
- '-P', '8000',
'-S', '443',
'-s', '$$ENDPOINT_NAME$$',
'-v', '$$ENDPOINT_CONFIG_ID$$',
'-a', 'grpc://127.0.0.1:5000'
]
ports:
- - containerPort: 8000
- containerPort: 443
volumeMounts:
- mountPath: /etc/nginx/ssl
diff --git a/kubernetes/shuffler/shuffler_service.yaml b/kubernetes/shuffler/shuffler_service.yaml
index 97632d7..9b651a3 100644
--- a/kubernetes/shuffler/shuffler_service.yaml
+++ b/kubernetes/shuffler/shuffler_service.yaml
@@ -14,28 +14,8 @@
name: shuffler
spec:
ports:
- # Requests to this port are forwarded directly to the Shuffler
- # implementation on port 5000. This will be deleted after all clients have
- # been moved over to accessing the Shuffler through Cloud Endpoints.
- - port: 5001
- # The port which the Shuffler implementation exposes within the cluster.
- # This must match the value passed to the implementation in the "-port" flag
- # above and the value passed to the Endpoints process in the the "-a" flag
- # above and the value used in Shuffler's Dockerfile.
- targetPort: 5000
- protocol: TCP
- name: shuffler-http2
- # Requests to this port are forwarded to the Endpoints
- # implementation on port 8000.
- - port: 8001
- # The port which the Endpoint implementation exposes within the cluster.
- # This must match the value passed to the Endpoints process in the '-P' flag
- # above.
- targetPort: 8000
- protocol: TCP
- name: endpoint-http2
# Requests to this port are forwarded to the Endpoints implementation
- # on the same port. Requests made to this port protected by TLS.
+ # on the same port. Requests made to this port are protected by TLS.
# All clients should access Shuffler via this port.
- port: 443
protocol: TCP
