Skip to content
Snippets Groups Projects
Commit 077956e2 authored by Benguria Elguezabal, Gorka's avatar Benguria Elguezabal, Gorka
Browse files

firewall related unsucessful tests

parent e68324dd
No related branches found
No related tags found
No related merge requests found
# https://dzone.com/articles/kubespray-10-simple-steps-for-installing-a-product # https://dzone.com/articles/kubespray-10-simple-steps-for-installing-a-product
# https://medium.com/platformer-blog/kubernetes-on-centos-7-with-firewalld-e7b53c1316af
# https://rancher.com/docs/rancher/v2.x/en/installation/requirements/ports/
--- ---
- block: - block:
- name: 'activate common kubernetes ports' - name: 'activate common kubernetes ports'
...@@ -7,9 +9,57 @@ ...@@ -7,9 +9,57 @@
permanent: yes permanent: yes
state: enabled state: enabled
loop: loop:
- 10251/tcp - 10250/tcp # kubelet API
- 10252/tcp - 179/tcp # calico BGP Port
- 2379-2380/tcp - 10255/tcp # Kubernetes kubelet API server for read-only access with no authentication (master and worker nodes)
- 6443/tcp
- name: 'activate masquerade'
firewalld:
masquerade: yes
state: enabled
permanent: yes
- name: 'activate nodeports kubernetes ports'
firewalld:
port: "{{item}}"
permanent: yes
state: enabled
loop:
- 30000-32767/tcp # NodePort port range
# https://docs.projectcalico.org/getting-started/kubernetes/requirements
- name: 'activate calico kubernetes ports'
firewalld:
port: "{{item}}"
permanent: yes
state: enabled
loop:
- 179/tcp # calico BGP Port
- 4789/udp # trying to fix but does not seem to contribute
- 5473/tcp # trying to fix but does not seem to contribute
# https://kubernetes.github.io/ingress-nginx/deploy/
- name: 'activate ingress-nginx kubernetes ports'
firewalld:
port: "{{item}}"
permanent: yes
state: enabled
loop:
- 80/tcp
- 443/tcp
- 10254/tcp # Ingress controller livenessProbe/readinessProbe
- 8443/tcp
#https://metallb.universe.tf/
- name: 'activate metallb kubernetes ports'
firewalld:
port: "{{item}}"
permanent: yes
state: enabled
loop:
- 7946/tcp
- 7946/udp
become: yes become: yes
# https://dzone.com/articles/kubespray-10-simple-steps-for-installing-a-product # https://dzone.com/articles/kubespray-10-simple-steps-for-installing-a-product
# https://medium.com/platformer-blog/kubernetes-on-centos-7-with-firewalld-e7b53c1316af
# https://rancher.com/docs/rancher/v2.x/en/installation/requirements/ports/
# https://kubernetes.io/docs/setup/production-environment/tools/kubeadm/install-kubeadm/
--- ---
- block: - block:
- name: 'activate master kubernetes ports' - name: 'activate master kubernetes ports'
...@@ -7,8 +10,9 @@ ...@@ -7,8 +10,9 @@
permanent: yes permanent: yes
state: enabled state: enabled
loop: loop:
- 10250/tcp - 6443/tcp # Kubernetes API server
- 10255/tcp - 2379/tcp # etcd client request
- 30000-32767/tcp - 2380/tcp # etcd peer communication
- 6783/tcp - 10251/tcp # kube-scheduler
- 10252/tcp # kube-controller-manager
become: yes become: yes
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment