Hi,

Looking for some advice.

Basically with-in lacework kubernetes , looking to see which pods & nodes are accessible from internet ( inbound from internet). What i found so far is we can use 

Resources → Kubernetes → Pod Network → External connections . You can select all columns and download a CSV. 

There is a similar view for actual nodes as well. Node→ Kubernetes → Node Network → Node External Connections 

I am not 100% sure if this is accurate. Also this does not tell what ports are open for inbound connections ( some of the ports listed are >65k which seems to be odd as well)

Wondering if anyone had figured out the correct way to “Identify Internet accessible nodes and container pods ( inbound from internet)?”.

Thanks in advance

Agent

Linux 6.6X

Platform

Using Lacework/Operationalizing

Cloud

GCP