From a8424ad1d453c8df1d8dfcb7fcd391f2c3c154f2 Mon Sep 17 00:00:00 2001 From: Jim Martens Date: Thu, 2 Nov 2023 08:53:08 +0100 Subject: [PATCH] Added additional ports needed for monitoring --- terraform/templates/cloud-init-k8s.tftpl | 3 +++ 1 file changed, 3 insertions(+) diff --git a/terraform/templates/cloud-init-k8s.tftpl b/terraform/templates/cloud-init-k8s.tftpl index 4b385df..2e2a0db 100644 --- a/terraform/templates/cloud-init-k8s.tftpl +++ b/terraform/templates/cloud-init-k8s.tftpl @@ -19,6 +19,9 @@ runcmd: - ufw allow 80 comment HTTP - ufw allow 443 comment HTTPS - ufw allow to ${node_ip} port 9100 comment "Metrics endpoint" + - ufw allow to ${node_ip} port 10250 comment "cadvisor port" + - ufw allow to ${node_ip} port 10259 comment "kube-scheduler port" + - ufw allow to ${node_ip} port 10257 comment "kube-controller-manager port" - ufw enable - sed -i -e '/^\(#\|\)PermitRootLogin/s/^.*$/PermitRootLogin no/' /etc/ssh/sshd_config - sed -i -e '/^\(#\|\)PasswordAuthentication/s/^.*$/PasswordAuthentication no/' /etc/ssh/sshd_config