ansible-role-kubernetes/templates/etc/firewalld/services/kubernetes.xml.j2

20 lines
660 B
Django/Jinja

<?xml version="1.0" encoding="utf-8"?>
<service>
<short>Kubernetes</short>
<description>Open needed Kubernetes ports.</description>
{% if kubernetes_master == false or kubernetes_master_taint == true %}
<port protocol="tcp" port="80"/>
<port protocol="tcp" port="443"/>
{% endif %}
{% if kubernetes_master == true %}
<port protocol="tcp" port="6443"/>
<port protocol="tcp" port="2379"/>
<port protocol="tcp" port="2380"/>
<port protocol="tcp" port="10250"/>
<port protocol="tcp" port="10251"/>
<port protocol="tcp" port="10252"/>
<port protocol="tcp" port="10255"/>
{% else %}
<port protocol="tcp" port="10250"/>
{% endif %}
</service>