Update firewall configuration
This commit is contained in:
parent
be494c827c
commit
43353b130b
1 changed files with 14 additions and 1 deletions
|
|
@ -118,10 +118,23 @@
|
||||||
when:
|
when:
|
||||||
- kubernetes_server|bool
|
- kubernetes_server|bool
|
||||||
with_items:
|
with_items:
|
||||||
- "{{ (lookup('vars', 'ansible_' + kubernetes_interface ).ipv4.network + '/' + lookup('vars', 'ansible_' + kubernetes_interface ).ipv4.netmask) | ansible.utils.ipaddr('net') }}"
|
|
||||||
- "{{ kubernetes_pods_network }}"
|
- "{{ kubernetes_pods_network }}"
|
||||||
- "10.96.0.0/12"
|
- "10.96.0.0/12"
|
||||||
|
|
||||||
|
- name: Add kubernetes networks to trusted firewalld zone
|
||||||
|
ansible.posix.firewalld:
|
||||||
|
# zone: kubernetes
|
||||||
|
zone: trusted
|
||||||
|
permanent: true
|
||||||
|
state: enabled
|
||||||
|
source: "{{ item }}"
|
||||||
|
when:
|
||||||
|
- kubernetes_server|bool
|
||||||
|
- kubernetes_interface is defined
|
||||||
|
# - false
|
||||||
|
with_items:
|
||||||
|
- "{{ (lookup('vars', 'ansible_' + kubernetes_interface ).ipv4.network + '/' + lookup('vars', 'ansible_' + kubernetes_interface ).ipv4.netmask) | ansible.utils.ipaddr('net') }}"
|
||||||
|
|
||||||
- name: Install kubernetes tools
|
- name: Install kubernetes tools
|
||||||
ansible.builtin.dnf:
|
ansible.builtin.dnf:
|
||||||
name: "{{ kubernetes_package_name }}"
|
name: "{{ kubernetes_package_name }}"
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue