This commit is contained in:
2026-05-20 16:12:22 +02:00
parent c25d744a10
commit 65d9bba4ce
+12 -12
View File
@@ -305,19 +305,19 @@
loop: "{{ aliases | dict2items }}"
when: inventory_hostname.endswith('-vm01.home.lan')
- name: Allow TCP 10250 from 192.168.77.0/24
firewalld:
rich_rule: 'rule family="ipv4" source address="192.168.77.0/24" port port="10250" protocol="tcp" accept'
permanent: yes
state: enabled
immediate: yes
# - name: Allow TCP 10250 from 192.168.77.0/24
# firewalld:
# rich_rule: 'rule family="ipv4" source address="192.168.77.0/24" port port="10250" protocol="tcp" accept'
# permanent: yes
# state: enabled
# immediate: yes
- name: Allow UDP 8472 from 192.168.77.0/24
firewalld:
rich_rule: 'rule family="ipv4" source address="192.168.77.0/24" port port="8472" protocol="udp" accept'
permanent: yes
state: enabled
immediate: yes
# - name: Allow UDP 8472 from 192.168.77.0/24
# firewalld:
# rich_rule: 'rule family="ipv4" source address="192.168.77.0/24" port port="8472" protocol="udp" accept'
# permanent: yes
# state: enabled
# immediate: yes
- name: Add flannel.1 interface to trusted zone
firewalld: