Skip to content

Firewall Ruleset should respect node cidr instead of hardcoded 10.0.0.0/8 #228

Description

@majst01

Description

Part of: metal-stack/releases#324

the nftables ruleset actually defines the cluster_prefixes like so:

# Prefixes in the cluster, typically 10.x.x.x
	# FIXME Should be filled with nodeCidr
	set cluster_prefixes {
		type ipv4_addr
		flags interval
		auto-merge
		elements = { 10.0.0.0/8 }
	}

This should be filled with the nodeCidrs as stated in the FIXME

Also it should be made IPv6 compatible as well

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions