File tree Expand file tree Collapse file tree 2 files changed +5
-5
lines changed
core/services/cluster/src/workflows/server/install/install_scripts/files Expand file tree Collapse file tree 2 files changed +5
-5
lines changed Original file line number Diff line number Diff line change @@ -255,9 +255,9 @@ for ipt in iptables ip6tables; do
255
255
# Allow egress traffic
256
256
add_ipt_rule "\$ ipt" "filter" "$ADMIN_CHAIN " "-s \$ SUBNET_VAR -o __PUBLIC_IFACE__ -j ACCEPT"
257
257
258
- # Allow public ingress traffic ONLY on host ports
259
- add_ipt_rule "\$ ipt" "filter" "$ADMIN_CHAIN " "-p tcp --dport __MIN_WAN_PORT__:__MAX_WAN_PORT__ - d \$ SUBNET_VAR -i __PUBLIC_IFACE__ -j ACCEPT"
260
- add_ipt_rule "\$ ipt" "filter" "$ADMIN_CHAIN " "-p udp --dport __MIN_WAN_PORT__:__MAX_WAN_PORT__ - d \$ SUBNET_VAR -i __PUBLIC_IFACE__ -j ACCEPT"
258
+ # Allow public ingress traffic on all ports because this is already mapped by CNI
259
+ add_ipt_rule "\$ ipt" "filter" "$ADMIN_CHAIN " "-p tcp -d \$ SUBNET_VAR -i __PUBLIC_IFACE__ -j ACCEPT"
260
+ add_ipt_rule "\$ ipt" "filter" "$ADMIN_CHAIN " "-p udp -d \$ SUBNET_VAR -i __PUBLIC_IFACE__ -j ACCEPT"
261
261
262
262
# MARK: Deny
263
263
# Deny all other egress traffic
Original file line number Diff line number Diff line change @@ -185,7 +185,7 @@ pub async fn create(
185
185
args : Vec :: new ( ) ,
186
186
network_mode : network. mode . unwrap_or_default ( ) . api_into ( ) ,
187
187
environment : body. runtime . and_then ( |r| r. environment ) . unwrap_or_default ( ) ,
188
- network_ports : unwrap ! ( network
188
+ network_ports : network
189
189
. ports
190
190
. unwrap_or_default ( )
191
191
. into_iter ( )
@@ -230,7 +230,7 @@ pub async fn create(
230
230
}
231
231
}
232
232
) ) )
233
- . collect:: <GlobalResult <HashMap <_, _>>>( ) ) ,
233
+ . collect :: < GlobalResult < HashMap < _ , _ > > > ( ) ? ,
234
234
endpoint_type,
235
235
} )
236
236
. tag ( "actor_id" , actor_id)
You can’t perform that action at this time.
0 commit comments