Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Minimal Firewall Exceptions #242

Merged
merged 2 commits into from
Nov 10, 2023
Merged

Minimal Firewall Exceptions #242

merged 2 commits into from
Nov 10, 2023

Conversation

dereknola
Copy link
Member

Changes

  • While it is recommended disable firewalls, you can get minimum viable K3s working with a few exceptions. This adds support for ufw and firewalld, the two most common firewalls.
  • Modifying k3s configuration from default such as --service-cidr would invalidate these exceptions. This is barebones, its left to the user to modify the firewall if they want more exceptions. See https://docs.k3s.io/installation/requirements#inbound-rules-for-k3s-server-nodes from the most common ports/rules.

Testing

Tested on HA configurations of:

  • ubuntu 20.04 with UFW enabled
  • rocky 8 with firewalld enabled

Linked Issues

#234

@dereknola dereknola merged commit e9a283b into master Nov 10, 2023
2 checks passed
@dereknola dereknola deleted the firewall_open branch November 10, 2023 16:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant