Why You Should Disable Your Unauthenticated Read-only Ports On GKE Kubelet Servers

Google alerted GKE users about an unauthenticated "read-only" port 10255 in the Kubelet server that could lead to data leaks. Google plans to phase out this port in GKE version 1.32 and future releases, but current clusters need manual intervention to disable it. Orca's scans reveal that 87% of organizations running GKE have at least one open port 10255, urging administrators to disable it for enhanced security.