mirror of
https://github.com/k3s-io/kubernetes.git
synced 2025-08-11 21:12:07 +00:00
Apply test firewalls to both the new gke- node tags and the old k8s- tags
(cherry picked from commit 69f5765fa2
)
This commit is contained in:
parent
0dd9bbb598
commit
0cae951dae
@ -168,7 +168,8 @@ function test-setup() {
|
||||
detect-project >&2
|
||||
|
||||
# At this point, CLUSTER_NAME should have been used, so its value is final.
|
||||
MINION_TAG="k8s-${CLUSTER_NAME}-node"
|
||||
MINION_TAG="gke-${CLUSTER_NAME}-node"
|
||||
OLD_MINION_TAG="k8s-${CLUSTER_NAME}-node"
|
||||
|
||||
# Open up port 80 & 8080 so common containers on minions can be reached.
|
||||
# TODO(mbforbes): Is adding ${USER} necessary, and sufficient, to avoid
|
||||
@ -177,14 +178,14 @@ function test-setup() {
|
||||
"${MINION_TAG}-${USER}-http-alt" \
|
||||
--allow tcp:80,tcp:8080 \
|
||||
--project "${PROJECT}" \
|
||||
--target-tags "${MINION_TAG}" \
|
||||
--target-tags "${MINION_TAG},${OLD_MINION_TAG}" \
|
||||
--network="${NETWORK}"
|
||||
|
||||
"${GCLOUD}" compute firewall-rules create \
|
||||
"${MINION_TAG}-${USER}-nodeports" \
|
||||
--allow tcp:30000-32767,udp:30000-32767 \
|
||||
--project "${PROJECT}" \
|
||||
--target-tags "${MINION_TAG}" \
|
||||
--target-tags "${MINION_TAG},${OLD_MINION_TAG}" \
|
||||
--network="${NETWORK}"
|
||||
}
|
||||
|
||||
@ -296,7 +297,7 @@ function test-teardown() {
|
||||
|
||||
detect-project >&2
|
||||
# At this point, CLUSTER_NAME should have been used, so its value is final.
|
||||
MINION_TAG="k8s-${CLUSTER_NAME}-node"
|
||||
MINION_TAG="gke-${CLUSTER_NAME}-node"
|
||||
|
||||
# First, remove anything we did with test-setup (currently, the firewall).
|
||||
# NOTE: Keep in sync with names above in test-setup.
|
||||
|
Loading…
Reference in New Issue
Block a user