ansible-collections/kubernetes
2
0
Fork 0
Code Issues 8 Pull Requests 1 Actions Projects Releases 28 Wiki Activity

fix(firewall): ensure slave nodes can access ALL masters API point

Browse Source 
!48
This commit is contained in:
Jon Lockwood
2024-03-18 19:09:17 +09:30
parent 89b5593abf
commit 17e3318c3c
1 changed files with 7 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
roles/nfc_kubernetes/templates/iptables-kubernetes.rules.j2
View File

@ -149,8 +149,13 @@
{#- All cluster Hosts -#} {#- All cluster Hosts -#}
{%- if
{%- if nfc_role_kubernetes_master | default(false) | bool -%} nfc_role_kubernetes_master | default(false) | bool
and
kubernetes_host not in groups['kubernetes_master']
and
'-I kubernetes-api -s ' + kubernetes_host + ' -j ACCEPT' not in data.firewall_rules
-%}
{%- set data.firewall_rules = data.firewall_rules + ['-I kubernetes-api -s ' + kubernetes_host + ' -j ACCEPT'] -%} {%- set data.firewall_rules = data.firewall_rules + ['-I kubernetes-api -s ' + kubernetes_host + ' -j ACCEPT'] -%}