Security group prot are hardcoded in heat templates for k8s (in coreos and atomic) maybe we could do something like :
secgroup_kube_master: type: OS::Neutron::SecurityGroup properties: rules: - protocol: tcp port_range_min: 7080 port_range_max: 7080 - protocol: tcp port_range_min: {get_resource: kubernetes_insecure_port} port_range_max: {get_resource: kubernetes_insecure_port} - protocol: tcp port_range_min: 2379 port_range_max: 2379 - protocol: tcp port_range_min: 2380 port_range_max: 2380 - protocol: tcp port_range_min: {get_resource: kubernetes_port} port_range_max: {get_resource: kubernetes_port} - protocol: tcp port_range_min: 30000 port_range_max: 32767
Security group prot are hardcoded in heat templates for k8s (in coreos and atomic) maybe we could do something like :
secgroup_ kube_master: :SecurityGroup
port_ range_min: 7080
port_ range_max: 7080
port_ range_min: {get_resource: kubernetes_ insecure_ port}
port_ range_max: {get_resource: kubernetes_ insecure_ port}
port_ range_min: 2379
port_ range_max: 2379
port_ range_min: 2380
port_ range_max: 2380
port_ range_min: {get_resource: kubernetes_port}
port_ range_max: {get_resource: kubernetes_port}
port_ range_min: 30000
port_ range_max: 32767
type: OS::Neutron:
properties:
rules:
- protocol: tcp
- protocol: tcp
- protocol: tcp
- protocol: tcp
- protocol: tcp
- protocol: tcp