From d47dd75df849799a18332e2be549bbd72281f72a Mon Sep 17 00:00:00 2001 From: Peter Hornyack Date: Wed, 29 May 2019 18:08:52 -0700 Subject: [PATCH] GCE Windows nodes: leave firewall enabled. --- cluster/gce/windows/k8s-node-setup.psm1 | 5 ----- 1 file changed, 5 deletions(-) diff --git a/cluster/gce/windows/k8s-node-setup.psm1 b/cluster/gce/windows/k8s-node-setup.psm1 index d69e9d567ad..2a1fbd9183b 100644 --- a/cluster/gce/windows/k8s-node-setup.psm1 +++ b/cluster/gce/windows/k8s-node-setup.psm1 @@ -230,11 +230,6 @@ function Set-EnvironmentVars { # Configures various settings and prerequisites needed for the rest of the # functions in this module and the Kubernetes binaries to operate properly. function Set-PrerequisiteOptions { - # The Windows firewall interferes with Kubernetes networking; GCE's firewall - # should be sufficient. - Log-Output "Disabling Windows Firewall" - Set-NetFirewallProfile -Profile Domain, Public, Private -Enabled False - # Windows updates cause the node to reboot at arbitrary times. Log-Output "Disabling Windows Update service" sc.exe config wuauserv start=disabled