diff options
| author | Johan Thomsen <jth@dbc.dk> | 2019-02-12 16:48:23 +0100 |
|---|---|---|
| committer | Franz Pletz <fpletz@fnordicwalking.de> | 2019-02-20 21:08:56 +0100 |
| commit | 466beb02143f99815eef90ef8a69c91cd898a998 (patch) | |
| tree | 019499759ad73754e40833ea2698ad26aeb485a7 /nixos/tests/kubernetes | |
| parent | 1f49c2160a074b6cb36389a05fd3395cee432d64 (diff) | |
nixos/kubernetes: let flannel use kubernetes as storage backend
+ isolate etcd on the master node by letting it listen only on loopback + enabling kubelet on master and taint master with NoSchedule The reason for the latter is that flannel requires all nodes to be "registered" in the cluster in order to setup the cluster network. This means that the kubelet is needed even at nodes on which we don't plan to schedule anything.
Diffstat (limited to 'nixos/tests/kubernetes')
| -rw-r--r-- | nixos/tests/kubernetes/base.nix | 1 |
1 files changed, 0 insertions, 1 deletions
diff --git a/nixos/tests/kubernetes/base.nix b/nixos/tests/kubernetes/base.nix index 3529f35f60e67..ec1a75e74c413 100644 --- a/nixos/tests/kubernetes/base.nix +++ b/nixos/tests/kubernetes/base.nix @@ -65,7 +65,6 @@ let } (optionalAttrs (any (role: role == "master") machine.roles) { networking.firewall.allowedTCPPorts = [ - 2379 2380 # etcd 443 # kubernetes apiserver ]; }) |