Added additional ports needed for monitoring

This commit is contained in:
2023-11-02 08:53:08 +01:00
parent fa5a818e7f
commit a8424ad1d4
+3
View File
@@ -19,6 +19,9 @@ runcmd:
- ufw allow 80 comment HTTP
- ufw allow 443 comment HTTPS
- ufw allow to ${node_ip} port 9100 comment "Metrics endpoint"
- ufw allow to ${node_ip} port 10250 comment "cadvisor port"
- ufw allow to ${node_ip} port 10259 comment "kube-scheduler port"
- ufw allow to ${node_ip} port 10257 comment "kube-controller-manager port"
- ufw enable
- sed -i -e '/^\(#\|\)PermitRootLogin/s/^.*$/PermitRootLogin no/' /etc/ssh/sshd_config
- sed -i -e '/^\(#\|\)PasswordAuthentication/s/^.*$/PasswordAuthentication no/' /etc/ssh/sshd_config