This commit is contained in:
2026-05-20 16:05:44 +02:00
parent afc94e73de
commit 0f276b9735
+20 -20
View File
@@ -156,28 +156,28 @@
name: kubelet name: kubelet
enabled: yes enabled: yes
state: started state: started
- name: Ensure firewalld is running # - name: Ensure firewalld is running
ansible.builtin.service: # ansible.builtin.service:
name: firewalld # name: firewalld
state: started # state: started
enabled: true # enabled: true
when: inventory_hostname.endswith('-vm01.home.lan') # when: inventory_hostname.endswith('-vm01.home.lan')
- name: Open Kubernetes API server port (6443) # - name: Open Kubernetes API server port (6443)
ansible.posix.firewalld: # ansible.posix.firewalld:
port: 6443/tcp # port: 6443/tcp
permanent: yes # permanent: yes
state: enabled # state: enabled
immediate: yes # immediate: yes
when: inventory_hostname.endswith('-vm01.home.lan') # when: inventory_hostname.endswith('-vm01.home.lan')
- name: Open etcd ports (2379-2380) # - name: Open etcd ports (2379-2380)
ansible.posix.firewalld: # ansible.posix.firewalld:
port: 2379-2380/tcp # port: 2379-2380/tcp
permanent: yes # permanent: yes
state: enabled # state: enabled
immediate: yes # immediate: yes
when: inventory_hostname.endswith('-vm01.home.lan') # when: inventory_hostname.endswith('-vm01.home.lan')
- name: Open kubelet and scheduler ports (10250-10252) - name: Open kubelet and scheduler ports (10250-10252)
ansible.posix.firewalld: ansible.posix.firewalld: