Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Assigning fixed port to Deep Security Smart Check with service type NodePort

    • Updated:
    • 30 Jan 2020
    • Product/Version:
    • Deep Security Smart Check
    • Platform:
    • N/A
Summary

Deep Security Smart Check assigns a random NodePort for every installation. This article explains how to make the NodePort value predictable by adding a fixed port.

 
This procedure only applies to Smart Check deployment with '--set service.type=NodePort' flag on installation command or overrides.yaml.
Details
Public

To assign a fixed port:

  1. Get Smart Check help chart. Download the latest Smart Check version using the command below.
    If you need to download a specific version, follow this link.
    #Download Helm chart
    curl -LO  https://github.com/deep-security/smartcheck-helm/archive/master.tar.gz
     
    #Extract file
    tar -xvzf master.tar.gz
  2. Edit the proxy.yaml service object using a text editor.
    vi ./smartcheck-helm-master/templates/proxy.yaml
  3. Look for "kind: Service", and then add "nodePort: <30000 - 32767>" under .spec.ports.
    NodePort only allows port 30000 to 32767 as value.
    apiVersion: v1
    kind: Service
    metadata:
    ...
    spec:
      type: {{ default "LoadBalancer" .Values.service.type }}
      ports:
        - port: {{ default 443 .Values.service.httpsPort }}
          targetPort: 8443
          nodePort: 30443                       #Added nodePort value
          protocol: TCP
          name: https
        - port: {{ default 80 .Values.service.httpPort }}
          targetPort: 8080
          nodePort: 30080                       #Added nodePort value
          protocol: TCP
          name: http
    ...
  4. Install Smart Check with "--set service.type=NodePort" flag.
    helm install --values overrides.yaml --set service.type=NodePort deepsecurity-smartcheck ./smartcheck-helm-master/
  5. Verify the service NodePort using the command below.
    kubectl get services

    Verify the service NodePort

    You should now be able to access the Smart Check web console using the following:
    https://<kubernetes node FQDN/IP>:<https NodePort>/

Premium
Internal
Partner
Rating:
Category:
Configure
Solution Id:
000238725
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.