mirror of
https://github.com/k3s-io/kubernetes.git
synced 2025-08-04 09:49:50 +00:00
Merge pull request #2042 from dchen1107/network
Always check default-internal firewall absent or not; if not, create it
This commit is contained in:
commit
37d7c80767
@ -244,6 +244,9 @@ function kube-up {
|
|||||||
# The network needs to be created synchronously or we have a race. The
|
# The network needs to be created synchronously or we have a race. The
|
||||||
# firewalls can be added concurrent with instance creation.
|
# firewalls can be added concurrent with instance creation.
|
||||||
gcutil addnetwork "${NETWORK}" --range "10.240.0.0/16"
|
gcutil addnetwork "${NETWORK}" --range "10.240.0.0/16"
|
||||||
|
fi
|
||||||
|
|
||||||
|
if ! gcutil getfirewall "${NETWORK}-default-internal" >/dev/null 2>&1; then
|
||||||
gcutil addfirewall "${NETWORK}-default-internal" \
|
gcutil addfirewall "${NETWORK}-default-internal" \
|
||||||
--project "${PROJECT}" \
|
--project "${PROJECT}" \
|
||||||
--norespect_terminal_width \
|
--norespect_terminal_width \
|
||||||
@ -251,6 +254,9 @@ function kube-up {
|
|||||||
--network "${NETWORK}" \
|
--network "${NETWORK}" \
|
||||||
--allowed_ip_sources "10.0.0.0/8" \
|
--allowed_ip_sources "10.0.0.0/8" \
|
||||||
--allowed "tcp:1-65535,udp:1-65535,icmp" &
|
--allowed "tcp:1-65535,udp:1-65535,icmp" &
|
||||||
|
fi
|
||||||
|
|
||||||
|
if ! gcutil getfirewall "${NETWORK}-default-ssh" >/dev/null 2>&1; then
|
||||||
gcutil addfirewall "${NETWORK}-default-ssh" \
|
gcutil addfirewall "${NETWORK}-default-ssh" \
|
||||||
--project "${PROJECT}" \
|
--project "${PROJECT}" \
|
||||||
--norespect_terminal_width \
|
--norespect_terminal_width \
|
||||||
|
Loading…
Reference in New Issue
Block a user