2019-01-25 17:54:52 +00:00
|
|
|
---
|
|
|
|
|
########################
|
|
|
|
|
#### FIREWALL TASKS ####
|
|
|
|
|
########################
|
|
|
|
|
|
2019-01-28 14:28:54 +00:00
|
|
|
## kubernetes requirements
|
2019-07-25 08:24:35 +00:00
|
|
|
- name: install firewalld
|
|
|
|
|
package:
|
|
|
|
|
name: firewalld
|
|
|
|
|
|
|
|
|
|
- name: enable and start firewalld
|
|
|
|
|
systemd:
|
|
|
|
|
name: firewalld
|
|
|
|
|
enabled: yes
|
|
|
|
|
state: started
|
2019-01-25 17:54:52 +00:00
|
|
|
|
2019-01-28 14:28:54 +00:00
|
|
|
- name: enable port 6443/tcp
|
|
|
|
|
firewalld:
|
|
|
|
|
port: 6443/tcp
|
|
|
|
|
permanent: yes
|
|
|
|
|
state: enabled
|
2019-01-25 17:54:52 +00:00
|
|
|
|
2019-01-28 14:28:54 +00:00
|
|
|
- name: enable port 10250/tcp
|
|
|
|
|
firewalld:
|
|
|
|
|
port: 10250/tcp
|
|
|
|
|
permanent: yes
|
|
|
|
|
state: enabled
|
2019-01-25 17:54:52 +00:00
|
|
|
|
2019-01-28 14:28:54 +00:00
|
|
|
- name: enable port 6443/udp
|
|
|
|
|
firewalld:
|
|
|
|
|
port: 6443/udp
|
|
|
|
|
permanent: yes
|
|
|
|
|
state: enabled
|
2019-01-25 17:54:52 +00:00
|
|
|
|
2019-01-28 14:28:54 +00:00
|
|
|
- name: enable port 10250/udp
|
|
|
|
|
firewalld:
|
|
|
|
|
port: 10250/udp
|
|
|
|
|
permanent: yes
|
|
|
|
|
state: enabled
|
2019-01-25 17:54:52 +00:00
|
|
|
|
2019-01-28 14:28:54 +00:00
|
|
|
## reload firewalld after setting rules
|
2019-01-25 17:54:52 +00:00
|
|
|
|
2019-01-28 14:28:54 +00:00
|
|
|
- name: reload firewalld
|
|
|
|
|
shell: firewall-cmd --reload
|
