fix(rke2): Adds more allwed ports required for Rancher/RKE2. Adds por…

…t 9345 to agent RKE2 config.
xartron · Dec 11, 2024 · eff049b · eff049b
1 parent d6079c4
commit eff049b
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 1 deletion.
diff --git a/blueprints/rke2/roles/firewall/tasks/main.yaml b/blueprints/rke2/roles/firewall/tasks/main.yaml
@@ -11,6 +11,11 @@
     - 2379-2380/tcp # etcd server
     - 10250-10255/tcp # Kubelet ports
     - 8472/udp # VXLAN
+    - 9345/tcp #RKE2 node reg
+    - 30000-32767/tcp #RKE2 node port range
+    - 2376/tcp #Docker daemon TLS port
+    - 8443/tcp #Rancher Webhook/NGINX
+    - 9443/tcp #Rancher Webhook
   become: true
   notify:
     - Reload firewalld

diff --git a/blueprints/rke2/roles/rke2/templates/rke2-agent-config.yaml.j2 b/blueprints/rke2/roles/rke2/templates/rke2-agent-config.yaml.j2
@@ -1,4 +1,4 @@
 # RKE2 agent (worker) configuration
-server: "https://{{ groups['masters'][0] }}"
+server: "https://{{ groups['masters'][0] }}:9345"
 token: "RANDOM-TOKEN"
 node-name: "{{ inventory_hostname }}"