update firewall rules for calico

marthanda93 · Apr 24, 2021 · 43cba73 · 43cba73
1 parent c72a53f
commit 43cba73
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/kubernetes/centos/script/bootstrap_master.sh b/kubernetes/centos/script/bootstrap_master.sh
@@ -6,6 +6,11 @@ firewall-cmd --permanent --add-port=10250/tcp
 firewall-cmd --permanent --add-port=10251/tcp
 firewall-cmd --permanent --add-port=10252/tcp
 firewall-cmd --permanent --add-port=8080/tcp
+firewall-cmd --permanent --add-port=179/tcp
+firewall-cmd --permanent --add-port=5473/tcp
+firewall-cmd --permanent --add-port=4789/udp
+firewall-cmd --permanent --add-port=443/tcp
+firewall-cmd --permanent --add-port=2379/tcp
 firewall-cmd --reload
 
 join_command=$(kubeadm init --apiserver-advertise-address=${2}.${3} --apiserver-cert-extra-sans=${2}.${3}  --node-name master-node --pod-network-cidr=${2}.0/16 --token-ttl 0 | grep -A2 'kubeadm join' | xargs -L 2 | paste -sd '')