Skip to content

Example for firewalled host #76

@fdcds

Description

@fdcds

When -open-iptables=true (the default), Konlet will allow all TCP, UDP and ICMP traffic to enter the host and also forward it: https://github.com/GoogleCloudPlatform/konlet/blob/v.0.11.0/gce-containers-startup/utils/iptables.go

Please add an example of how to disable this.

I suspect that a parameter would have to be added to /usr/share/gce-containers/konlet-startup, but I do not see how that can be done with this Terraform module or by setting VM metadata, or where that file comes from (so I could ask there how to do it).

Update 2021-09-23: Since this might need support from Konlet, I also created GoogleCloudPlatform/konlet#68.

Metadata

Metadata

Assignees

No one assigned

    Labels

    triagedScoped and ready for workupstreamWork required on Terraform core or provider

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions