Some networking fixes.

2025-12-18 22:28:03 -05:00
parent a2899d38a2
commit e6daf2c304
33 changed files with 1806 additions and 1722 deletions
--- a/nix/kubernetes/roles/worker_node/default.nix
+++ b/nix/kubernetes/roles/worker_node/default.nix
@@ -18,10 +18,27 @@
  };

  config = lib.mkIf config.me.worker_node.enable {
+    me.cilium.enable = true;
    me.containerd.enable = true;
    me.firewall.enable = true;
    # me.kube-proxy.enable = true;
    me.kubelet.enable = true;
    me.kubernetes.enable = true;
+
+    networking.firewall.allowedTCPPortRanges = [
+      {
+        # NodePort services
+        from = 30000;
+        to = 32767;
+      }
+    ];
+
+    networking.firewall.allowedUDPPortRanges = [
+      {
+        # NodePort services
+        from = 30000;
+        to = 32767;
+      }
+    ];
  };
 }