Use IANA ports for etcd

http://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=etcd

Use 2379 and 2380, not 4001 and 7001
This commit is contained in:
Eric Paris 2015-04-03 12:50:18 -04:00
parent a94d8e361e
commit 051ab346bd
4 changed files with 10 additions and 10 deletions

View File

@ -4,13 +4,13 @@
# in case this is also a minion where firewalld turned off
ignore_errors: yes
with_items:
- 4001
- 7001
- 2379
- 2380
- name: Save firewalld port for etcd
firewalld: port={{ item }}/tcp permanent=true state=enabled
# in case this is also a minion where firewalld turned off
ignore_errors: yes
with_items:
- 4001
- 7001
- 2379
- 2380

View File

@ -8,10 +8,10 @@
service: name=iptables enabled=yes state=started
- name: Open etcd client port with iptables
command: /sbin/iptables -I INPUT 1 -p tcp --dport {{ item }} -j ACCEPT -m comment --comment "etcd_client"
when: etcd_client not in iptablesrules.stdout
command: /sbin/iptables -I INPUT 1 -p tcp --dport {{ item }} -j ACCEPT -m comment --comment "etcd"
when: etcd not in iptablesrules.stdout
notify:
- Save iptables rules
with_items:
- 4001
- 7001
- 2379
- 2380

View File

@ -1,4 +1,4 @@
# etcd2.0
ETCD_NAME=default
ETCD_DATA_DIR="/var/lib/etcd/default.etcd"
ETCD_LISTEN_CLIENT_URLS="http://0.0.0.0:4001"
ETCD_LISTEN_CLIENT_URLS="http://0.0.0.0:2379"

View File

@ -17,7 +17,7 @@ KUBE_API_ADDRESS="--address=0.0.0.0"
KUBE_SERVICE_ADDRESSES="--portal_net={{ kube_service_addresses }}"
# Location of the etcd cluster
KUBE_ETCD_SERVERS="--etcd_servers=http://{{ groups['etcd'][0] }}:4001"
KUBE_ETCD_SERVERS="--etcd_servers=http://{{ groups['etcd'][0] }}:2379"
# default admission control policies
KUBE_ADMISSION_CONTROL="--admission_control=NamespaceAutoProvision,LimitRanger,ResourceQuota"