talexander/machine_setup
1
0
Fork 0
Code Issues Pull Requests Releases Activity

Add notes about single-interface kubernetes cluster.

Browse Source
This commit is contained in:
Tom Alexander 2023-06-17 00:25:28 -04:00
parent f3980dc821
commit 6e18f5bc94
Signed by: talexander
GPG Key ID: D3A179C9A53C0EDE
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
ansible/roles/firewall/files/mrmanager_pf.conf
View File

@ -29,6 +29,11 @@ nat pass on $not_ext_if proto {tcp, udp} from $jail_nat_v4 to 10.215.1.204 port
block log all
pass out on $ext_if
# Single interface kubernetes cluster is working with the following run on mrmanager:
# doas route add -host 74.80.180.139 -int jail_nat
# Plus this in pf.conf:
# pass quick from any to 74.80.180.139
pass in on jail_nat
# Allow traffic from my machine to the jails/virtual machines
pass out on jail_nat from $jail_nat_v4