This commit is contained in:
2026-05-20 16:19:36 +02:00
parent 65d9bba4ce
commit 9184deef93
+17 -17
View File
@@ -319,25 +319,25 @@
# state: enabled # state: enabled
# immediate: yes # immediate: yes
- name: Add flannel.1 interface to trusted zone # - name: Add flannel.1 interface to trusted zone
firewalld: # firewalld:
rich_rule: 'rule family="ipv4" source NOT address="0.0.0.0/0" accept' # interface handling is tricky with rich_rule # rich_rule: 'rule family="ipv4" source NOT address="0.0.0.0/0" accept' # interface handling is tricky with rich_rule
permanent: yes # permanent: yes
state: enabled # state: enabled
immediate: yes # immediate: yes
- name: Add cni0 interface to trusted zone # - name: Add cni0 interface to trusted zone
firewalld: # firewalld:
rich_rule: 'rule family="ipv4" source NOT address="0.0.0.0/0" accept' # rich_rule: 'rule family="ipv4" source NOT address="0.0.0.0/0" accept'
permanent: yes # permanent: yes
state: enabled # state: enabled
immediate: yes # immediate: yes
- name: Ensure firewalld is restarted # - name: Ensure firewalld is restarted
ansible.builtin.service: # ansible.builtin.service:
name: firewalld # name: firewalld
state: stopped # state: stopped
enabled: false # enabled: false
# ---------------------------- # ----------------------------
# 1. Install Helm v3 # 1. Install Helm v3
# ---------------------------- # ----------------------------