From 7b81cc2d2955a3bf01c78162bdd89ac765ae8871 Mon Sep 17 00:00:00 2001 From: fchinembiri Date: Sun, 19 Jul 2026 05:57:27 +0200 Subject: [PATCH] fix(k8s): add eth0 to public zone in firewalld for pod egress --- k8s/fix-ufw-ds-v2.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/k8s/fix-ufw-ds-v2.yaml b/k8s/fix-ufw-ds-v2.yaml index 40dc93a..5cf14f0 100644 --- a/k8s/fix-ufw-ds-v2.yaml +++ b/k8s/fix-ufw-ds-v2.yaml @@ -62,6 +62,7 @@ spec: firewall-cmd --permanent --add-source=167.86.68.48 firewall-cmd --permanent --add-source=95.111.235.130 firewall-cmd --permanent --add-source=80.241.209.235 + firewall-cmd --permanent --zone=public --add-interface=eth0 firewall-cmd --reload elif command -v dnf >/dev/null && grep -q "Rocky Linux 10" /etc/os-release 2>/dev/null; then # Specific fix for Rocky 10 missing legacy netfilter modules