├── README.md
├── k8s-master.xml
└── k8s-worker.xml


/README.md:
--------------------------------------------------------------------------------
 1 | # k8s-firewalld
 2 | Firewalld service configuration files for Kubernetes hosts
 3 | 
 4 | To test on a Kubernetes Master:
 5 | <ul>
 6 |   <li>Copy the k8s-master.xml file to the /etc/firewalld/services directory</li>
 7 |   <li>Reload the firewall daemon with firewall-cmd --reload</li>
 8 |   <li>Add the service to the appropriate zone with firewall-cmd --add-service=k8s-master --zone=public</li>
 9 |   <liOptionally, make the service permanent with firewall-cmd --runtime-to-permanent</li>
10 | </ul>
11 | 
12 | To test on a Kubernetes Worker:
13 | <ul>
14 |   <li>Copy the k8s-worker.xml file to the /etc/firewalld/services directory</li>
15 |   <li>Reload the firewall daemon with firewall-cmd --reload</li>
16 |   <li>Add the service to the appropriate zone with firewall-cmd --add-service=k8s-worker --zone=public</li>
17 |   <liOptionally, make the service permanent with firewall-cmd --runtime-to-permanent</li>
18 | </ul>
19 | 


--------------------------------------------------------------------------------
/k8s-master.xml:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="utf-8"?>
 2 | <service>
 3 |   <short>Kubernetes Master</short>
 4 |   <description>Ports required for a Kubernetes Master node per https://kubernetes.io/docs/setup/independent/install-kubeadm/.</description>
 5 |   <port port="6443" protocol="tcp"/>
 6 |   <port port="2379" protocol="tcp"/>
 7 |   <port port="2380" protocol="tcp"/>
 8 |   <port port="10250-10252" protocol="tcp"/>
 9 |   <port port="10255" protocol="tcp"/>
10 | </service>
11 | 


--------------------------------------------------------------------------------
/k8s-worker.xml:
--------------------------------------------------------------------------------
1 | <?xml version="1.0" encoding="utf-8"?>
2 | <service>
3 |   <short>Kubernetes Worker</short>
4 |   <description>Ports required for a Kubernetes Worker node per https://kubernetes.io/docs/setup/independent/install-kubeadm/.</description>
5 |   <port port="10250" protocol="tcp"/>
6 |   <port port="10255" protocol="tcp"/>
7 |   <port port="30000-32767" protocol="tcp"/>
8 | </service>
9 | 


--------------------------------------------------------------------------------