Allow cilium ports

This commit is contained in:
2023-11-15 14:03:39 +01:00
parent 1ea29413c9
commit 63522a30fb
@@ -7,7 +7,10 @@ ufw allow OpenSSH
ufw allow 16443 comment "Kubernetes API endpoint" ufw allow 16443 comment "Kubernetes API endpoint"
ufw allow 80 comment HTTP ufw allow 80 comment HTTP
ufw allow 443 comment HTTPS ufw allow 443 comment HTTPS
ufw allow to ${node_ip} port 4244 comment "Hubble peer endpoint"
ufw allow to ${node_ip} port 9100 comment "Metrics endpoint" ufw allow to ${node_ip} port 9100 comment "Metrics endpoint"
ufw allow to ${node_ip} port 9964 comment "Cilium agent endpoint"
ufw allow to ${node_ip} port 9965 comment "Hubble metrics endpoint"
ufw allow to ${node_ip} port 10249 comment "kube-proxy metrics port" ufw allow to ${node_ip} port 10249 comment "kube-proxy metrics port"
ufw allow to ${node_ip} port 10250 comment "cadvisor port" ufw allow to ${node_ip} port 10250 comment "cadvisor port"
ufw allow to ${node_ip} port 10259 comment "kube-scheduler port" ufw allow to ${node_ip} port 10259 comment "kube-scheduler port"