From 17cf774971ff409dde3856011784ff7c5e200009 Mon Sep 17 00:00:00 2001
From: Jim Martens <github@2martens.de>
Date: Sat, 18 Nov 2023 09:16:24 +0100
Subject: [PATCH] Allow VXLAN connectivity

---
 .../modules/k8s-cluster/templates/scripts/firewall-setup.sh      | 1 +
 1 file changed, 1 insertion(+)

diff --git a/terraform/modules/k8s-cluster/templates/scripts/firewall-setup.sh b/terraform/modules/k8s-cluster/templates/scripts/firewall-setup.sh
index c01fcc6..c26767b 100644
--- a/terraform/modules/k8s-cluster/templates/scripts/firewall-setup.sh
+++ b/terraform/modules/k8s-cluster/templates/scripts/firewall-setup.sh
@@ -8,6 +8,7 @@ ufw allow 16443 comment "Kubernetes API endpoint"
 ufw allow 80 comment HTTP
 ufw allow 443 comment HTTPS
 ufw allow to ${node_ip} port 4244 comment "Hubble peer endpoint"
+ufw allow to ${node_ip} port 8472 comment "VXLAN connectivity"
 ufw allow to ${node_ip} port 9100 comment "Metrics endpoint"
 ufw allow to ${node_ip} port 9962 comment "Cilium agent metrics"
 ufw allow to ${node_ip} port 9963 comment "Cilium operator metrics"