From 65d9bba4cea7d95ea5d17dd4123a1eadd34908e5 Mon Sep 17 00:00:00 2001
From: jaydee <jaydee@sectorq.eu>
Date: Wed, 20 May 2026 16:12:22 +0200
Subject: [PATCH] build

---
 roles/kubernetes/tasks/Rocky.yml | 24 ++++++++++++------------
 1 file changed, 12 insertions(+), 12 deletions(-)

diff --git a/roles/kubernetes/tasks/Rocky.yml b/roles/kubernetes/tasks/Rocky.yml
index 4371acf..51663f9 100644
--- a/roles/kubernetes/tasks/Rocky.yml
+++ b/roles/kubernetes/tasks/Rocky.yml
@@ -305,19 +305,19 @@
       loop: "{{ aliases | dict2items }}"
       when: inventory_hostname.endswith('-vm01.home.lan')
 
-    - name: Allow TCP 10250 from 192.168.77.0/24
-      firewalld:
-        rich_rule: 'rule family="ipv4" source address="192.168.77.0/24" port port="10250" protocol="tcp" accept'
-        permanent: yes
-        state: enabled
-        immediate: yes
+    # - name: Allow TCP 10250 from 192.168.77.0/24
+    #   firewalld:
+    #     rich_rule: 'rule family="ipv4" source address="192.168.77.0/24" port port="10250" protocol="tcp" accept'
+    #     permanent: yes
+    #     state: enabled
+    #     immediate: yes
 
-    - name: Allow UDP 8472 from 192.168.77.0/24
-      firewalld:
-        rich_rule: 'rule family="ipv4" source address="192.168.77.0/24" port port="8472" protocol="udp" accept'
-        permanent: yes
-        state: enabled
-        immediate: yes
+    # - name: Allow UDP 8472 from 192.168.77.0/24
+    #   firewalld:
+    #     rich_rule: 'rule family="ipv4" source address="192.168.77.0/24" port port="8472" protocol="udp" accept'
+    #     permanent: yes
+    #     state: enabled
+    #     immediate: yes
 
     - name: Add flannel.1 interface to trusted zone
       firewalld: