Comment 7 for bug 1436191

Yes, the provider is responsible for making sure the API server port is open. That haven't changed, but I agree it can be improved.

How ports management and firewalling work will need to change and there are steps to get there, which I'll try to summarize in the bug I'm about to file about it.