xavor/kubernetes
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Actualizar readme-suse.md

Browse Source
This commit is contained in:
xavor
2025-07-23 23:31:41 +00:00
parent cc9791ba4a
commit ac03d4cdae
1 changed files with 5 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
readme-suse.md
View File

@ -207,14 +207,15 @@ el trafico basico que se debe permitir es:
```bash
# Básico Kubernetes
# Asocia la interfaz de red interna del clúster a la zona trusted (típicamente br-admin)
sudo firewall-cmd --zone=trusted --change-interface=br-admin --permanent
sudo firewall-cmd --zone=trusted --add-interface=br-admin --permanent
sudo firewall-cmd --zone=trusted --add-interface=vlan40 --permanent
# Abre solo en zona trusted los puertos necesarios para el clúster:
sudo firewall-cmd --zone=trusted --add-port=6443/tcp --permanent # API Server
sudo firewall-cmd --zone=trusted --add-port=10250/tcp --permanent # Kubelet API
sudo firewall-cmd --zone=trusted --add-port=2379/tcp --permanent # etcd (client)
sudo firewall-cmd --zone=trusted --add-port=2380/tcp --permanent # etcd (peer)
sudo firewall-cmd --zone=trusted --add-port=8472/udp --permanent # Flannel VXLAN
sudo firewall-cmd --zone=trusted --add-port=2379/tcp --permanent # etcd client (solo control-plane)
sudo firewall-cmd --zone=trusted --add-port=2380/tcp --permanent # etcd peer (solo control-plane)
sudo firewall-cmd --zone=trusted --add-port=8472/udp --permanent # Flannel VXLAN (si usas Flannel)
# Si vas a exponer servicios (Traefik, MetalLB), abre HTTP/HTTPS solo si lo necesitas en todos los nodos
# (mejor hacerlo en los nodos donde se expone tráfico externo, no en todos)