-
Notifications
You must be signed in to change notification settings - Fork 78
Open
Labels
triagedScoped and ready for workScoped and ready for workupstreamWork required on Terraform core or providerWork required on Terraform core or provider
Description
When -open-iptables=true (the default), Konlet will allow all TCP, UDP and ICMP traffic to enter the host and also forward it: https://github.com/GoogleCloudPlatform/konlet/blob/v.0.11.0/gce-containers-startup/utils/iptables.go
Please add an example of how to disable this.
I suspect that a parameter would have to be added to /usr/share/gce-containers/konlet-startup, but I do not see how that can be done with this Terraform module or by setting VM metadata, or where that file comes from (so I could ask there how to do it).
Update 2021-09-23: Since this might need support from Konlet, I also created GoogleCloudPlatform/konlet#68.
Metadata
Metadata
Assignees
Labels
triagedScoped and ready for workScoped and ready for workupstreamWork required on Terraform core or providerWork required on Terraform core or provider