Skip to content

K
k3s
Commit b886897f authored by Quintin Lee's avatar Quintin Lee
Browse files
Options

Prepend the metadata firewall in gce, so it isn't superceded.

parent 289de0ee
Show whitespace changes
Inline Side-by-side
Showing with 2 additions and 2 deletions
cluster/gce/configure-vm.sh
View file @ b886897f
...@@ -91,7 +91,7 @@ function config-ip-firewall { ...@@ -91,7 +91,7 @@ function config-ip-firewall {
echo "Configuring IP firewall rules" echo "Configuring IP firewall rules"
iptables -N KUBE-METADATA-SERVER iptables -N KUBE-METADATA-SERVER
iptables -A FORWARD -p tcp -d 169.254.169.254 --dport 80 -j KUBE-METADATA-SERVER iptables -I FORWARD -p tcp -d 169.254.169.254 --dport 80 -j KUBE-METADATA-SERVER
if [[ -n "${KUBE_FIREWALL_METADATA_SERVER:-}" ]]; then if [[ -n "${KUBE_FIREWALL_METADATA_SERVER:-}" ]]; then
iptables -A KUBE-METADATA-SERVER -j DROP iptables -A KUBE-METADATA-SERVER -j DROP
......
cluster/gce/gci/configure-helper.sh
View file @ b886897f
...@@ -99,7 +99,7 @@ function config-ip-firewall { ...@@ -99,7 +99,7 @@ function config-ip-firewall {
fi fi
iptables -N KUBE-METADATA-SERVER iptables -N KUBE-METADATA-SERVER
iptables -A FORWARD -p tcp -d 169.254.169.254 --dport 80 -j KUBE-METADATA-SERVER iptables -I FORWARD -p tcp -d 169.254.169.254 --dport 80 -j KUBE-METADATA-SERVER
if [[ -n "${KUBE_FIREWALL_METADATA_SERVER:-}" ]]; then if [[ -n "${KUBE_FIREWALL_METADATA_SERVER:-}" ]]; then
iptables -A KUBE-METADATA-SERVER -j DROP iptables -A KUBE-METADATA-SERVER -j DROP
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment