From e2ce7002419b044074ed6aa4859ae303c2f18ad1 Mon Sep 17 00:00:00 2001 From: Sheogorath <sheogorath@shivering-isles.com> Date: Tue, 5 Oct 2021 03:46:57 +0200 Subject: [PATCH] Add etcd monitoring port to open ports on master nodes --- terraform/firewall.tf | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/terraform/firewall.tf b/terraform/firewall.tf index c07d5bc3b..c1663a25e 100644 --- a/terraform/firewall.tf +++ b/terraform/firewall.tf @@ -99,11 +99,11 @@ resource "hcloud_firewall" "k8s-master" { port = "6443" source_ips = [for s in concat([hcloud_load_balancer.lb.ipv4],module.nodes.ipv4_addresses) : "${s}/32"] } - # etcd server and peer ports + # etcd server and peer ports + monitoring rule { direction = "in" protocol = "tcp" - port = "2379-2380" + port = "2379-2381" source_ips = [for s in module.nodes.ipv4_addresses : "${s}/32"] } # kube-scheduler -- GitLab