In current onap releases there are over 100 NodePorts externally accessible to an ONAP Cluster. Not only is this unnecessary and unmanageable but it poses a security risk with so many potential points of attack. By using an Nginx Ingress Controller to handle northbound traffic coming into and out of a k8s cluster, we dramatically reduce the attack surface and have a much simpler means of accessing deployed services within the cluster.

In Frankfurt release we plan to introduce ingress controller next to the NodePorts. There should be no functionality break for any project. It's only an alternative way for accessing the ONAP services to allow Project to play with it. The removal of all HTTP/HTTPS NodePorts is planned for G release if everything works well