# Helm not working in Rancher console **URL:** \ **Category:** Rancher 1.x\ **Created:** [March 1, 2017, 1:32pm UTC](https://forums.suse.com/t/helm-not-working-in-rancher-console/5697 "2017-03-01T13:32:55Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![DarrenRatcliffe](https://avatars.discourse-cdn.com/v4/letter/d/ecc23a/32.png) [@DarrenRatcliffe](https://forums.suse.com/u/DarrenRatcliffe)\ **Post date:** [March 1, 2017, 1:32pm UTC](https://forums.suse.com/t/helm-not-working-in-rancher-console/5697/1 "2017-03-01T13:32:55Z")
When trying to deploy a Helm chart (built in console) to a Kubernetes cluster using Rancher 1.4 I get this error: ``` Error: forwarding ports: error upgrading connection: error dialing backend: dial tcp 35.157.144.15:10250: getsockopt: connection timed out ``` It is a standard Kubernetes deployment using Rancher, is there a need to open additional ports between the Rancher server (Helm client) and Tiller server (Kube pod)? Any ideas? Thanks ---
**Author:** ![jelliott](https://avatars.discourse-cdn.com/v4/letter/j/4da419/32.png) [@jelliott](https://forums.suse.com/u/jelliott)\ **Post date:** [April 22, 2017, 2:18am UTC](https://forums.suse.com/t/helm-not-working-in-rancher-console/5697/2 "2017-04-22T02:18:31Z")
Bumping this b/c I came across the same thing. In order to alleviate this issue I allowed ingress on port 10250 on my kubernetes hosts, but this does not seem to be documented anywhere in kubernetes setup. I also noticed that kube-apiserver does not appear to be running in my cluster. - Does the rancher master act as the kube-apiserver? - Does it require direct access to all hosts at 10250 to work correctly? - Can I run kube-apiserver in the cluster? ---
**Author:** ![jelliott](https://avatars.discourse-cdn.com/v4/letter/j/4da419/32.png) [@jelliott](https://forums.suse.com/u/jelliott)\ **Post date:** [April 22, 2017, 1:49pm UTC](https://forums.suse.com/t/helm-not-working-in-rancher-console/5697/3 "2017-04-22T13:49:38Z")
Ok, with a little playing I found that the rancher master does not need to access the hosts at 10250, but the hosts do need to access each other at 10250. This should probably be added to the docs. I would still love a low level description of the relationship between the master and the kubelets with regard to kubetctl and helm.