commit | 9a88f28805fc74a7c710aa7ddc56e99badabb964 | [log] [tgz] |
---|---|---|
author | Bartosz Stebel <implr@hackerspace.pl> | Sun Oct 08 22:26:20 2023 +0200 |
committer | implr <implr@hackerspace.pl> | Mon Oct 09 19:02:18 2023 +0000 |
tree | 4a8d9afb81aa2b6d8665c0c176e57416fc8ed4c2 | |
parent | d9567b3b999bbdf3e22280815d5ee0e3963357da [diff] [blame] |
cluster/{machines,certs}: add dcr03s16.hswaw.net Also make dataplane-only nodes actually work: - make kubeproxy use the same package as kubelet - disable firewall Change-Id: I7babbb749656e6f75151c8eda6e3f09f3c6bff5f Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1686 Reviewed-by: q3k <q3k@hackerspace.pl>
diff --git a/cluster/machines/modules/kube-dataplane.nix b/cluster/machines/modules/kube-dataplane.nix index 45efcd2..693d633 100644 --- a/cluster/machines/modules/kube-dataplane.nix +++ b/cluster/machines/modules/kube-dataplane.nix
@@ -46,6 +46,8 @@ ${n.config.hscloud.base.mgmtIf} ${n.config.hscloud.base.fqdn} '') controlNodes)); + + networking.firewall.enable = false; # this seems to depend on flannel # TODO(q3k): file issue