mirrors/k3s-ansible
1
0
Fork 1
mirror of https://github.com/k3s-io/k3s-ansible.git synced 2025-12-25 00:12:37 +01:00
Code Issues Packages Projects Releases Wiki Activity

feat: add ufw allow inter-node ports (#460)

Browse Source 
Signed-off-by: Riccardo Pressiani <riccardo.pressiani@gmail.com>
This commit is contained in:
Riccardo Pressiani
2025-11-10 12:31:11 -05:00
committed by GitHub
parent db206785b4
commit 9c945da3cc
1 changed files with 14 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
roles/prereq/tasks/main.yml
View File

@@ -63,6 +63,20 @@
port: "2379:2381" port: "2379:2381"
proto: tcp proto: tcp
- name: If ufw enabled, open inter-node ports
when:
- "'Status: active' in prereq_ufw_status['stdout']"
community.general.ufw:
rule: allow
port: "{{ item.port }}"
proto: "{{ item.proto }}"
loop:
- { port: "5001", proto: "tcp" } # Spegel (Embedded distributed registry)
- { port: "8472", proto: "udp" } # Flannel VXLAN
- { port: "10250", proto: "tcp" } # Kubelet metrics
- { port: "51820", proto: "udp" } # Flannel Wireguard (IPv4)
- { port: "51821", proto: "udp" } # Flannel Wireguard (IPv6)
- name: If ufw enabled, allow default CIDRs - name: If ufw enabled, allow default CIDRs
when: when:
- "'Status: active' in prereq_ufw_status['stdout']" - "'Status: active' in prereq_ufw_status['stdout']"