Snyk - Open Source Security
Log In Sign Up

Ecosystem

    AWS
      API Gateway (REST APIs)
      Athena
      Batch
      CloudFront
      CloudTrail
      CloudWatch
      CodeBuild
      Cognito
      Config
      DocumentDB
      DynamoDB
      EBS
      EC2
      ECR
      ECS
      EFS
      EKS
      ElastiCache
      Elastic Load Balancing
      Elastic Map Reduce (EMR)
      ElasticSearch
      Glacier
      Global Accelerator
      Glue
      IAM
      KMS
      Kinesis
      Lambda
      MQ
      Managed Streaming for Kafka (MSK)
      Neptune
      Provider
      Public Access
      Quantum Ledger Database
      RDS
      Redshift
      S3
      SNS
      SQS
      SSM
      Sagemaker
      Secrets Manager
      Transfer
      VPC
      WorkSpace
    Azure
      API Management
      App Service (Web Apps)
      Authorization
      Automation
      Batch
      CDN
      Compute
      Container
      CosmosDB (DocumentDB)
      Data Factory
      Data Lake
      Database
      Key Vault
      Monitor
      Network
      Redis
      Search
      Security Center
      Service Fabric
      Storage
      Synapse
    GCP
      App Engine
      BigQuery
      Cloud DNS
      Cloud Key Management Service
      Cloud Platform
      Cloud SQL
      Cloud Storage
      Compute Engine
      IAM
      Kubernetes (Container) Engine
      MemoryStore (Redis)
    Kubernetes
      Deployment
      Network Policy
      Pod Security Policy
      Role
      RoleBinding
      Service

Tags

    CloudFormation
    Terraform
    ARM
    Kubernetes
Home > Kubernetes > Deployment > Container is running with multiple open ports
low severity

Container is running with multiple open ports (SNYK-CC-K8S-36)

Deployment Kubernetes Terraform

Issue

Container is declaring more than 2 listening ports

Impact

Increases the attack surface of the application and the container.

Resolve

Kubernetes
Reduce `ports` count to 2
Terraform
Reduce `ports` count to 2

References

  • CIS Docker Benchmark 1.2.0 - 5.8 Ensure that only needed ports are open on the container