This commit is contained in:
2026-05-20 16:19:36 +02:00
parent 65d9bba4ce
commit 9184deef93
+17 -17
View File
@@ -319,25 +319,25 @@
# state: enabled
# immediate: yes
- name: Add flannel.1 interface to trusted zone
firewalld:
rich_rule: 'rule family="ipv4" source NOT address="0.0.0.0/0" accept' # interface handling is tricky with rich_rule
permanent: yes
state: enabled
immediate: yes
# - name: Add flannel.1 interface to trusted zone
# firewalld:
# rich_rule: 'rule family="ipv4" source NOT address="0.0.0.0/0" accept' # interface handling is tricky with rich_rule
# permanent: yes
# state: enabled
# immediate: yes
- name: Add cni0 interface to trusted zone
firewalld:
rich_rule: 'rule family="ipv4" source NOT address="0.0.0.0/0" accept'
permanent: yes
state: enabled
immediate: yes
# - name: Add cni0 interface to trusted zone
# firewalld:
# rich_rule: 'rule family="ipv4" source NOT address="0.0.0.0/0" accept'
# permanent: yes
# state: enabled
# immediate: yes
- name: Ensure firewalld is restarted
ansible.builtin.service:
name: firewalld
state: stopped
enabled: false
# - name: Ensure firewalld is restarted
# ansible.builtin.service:
# name: firewalld
# state: stopped
# enabled: false
# ----------------------------
# 1. Install Helm v3
# ----------------------------