akadmin/Funk-lab
1
0
Fork 0
mirror of https://github.com/Alkatrazz24/Funk-lab.git synced 2026-07-08 05:34:43 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

fix(nftables): ouvre port 9093 pour AlertManager webhook → Hermes monitor

Browse source 
Les pods AlertManager (10.42.0.0/16) ne pouvaient pas joindre le webhook
sur storage-01:9093 — alertes Prometheus reçues mais jamais transmises à
ask-agent monitor. Port 9093 ajouté pour pods k8s + nœuds cluster.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
alkatrazz 2026-05-14 21:37:48 +02:00
parent 719cd4bf8c
commit c97e895b87
1 changed files with 3 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
ansible/roles/gateway/templates/nftables.conf.j2
View file

@ -35,6 +35,9 @@ table inet filter {
# Monitoring — node_exporter (scraping par Prometheus : nœuds cluster + pods 10.42/16)
tcp dport 9100 ip saddr { 192.168.10.0/24, 10.42.0.0/16 } accept
# AlertManager webhook → Hermes monitor (pods k8s 10.42/16 + nœuds cluster)
tcp dport 9093 ip saddr { 192.168.10.0/24, 10.42.0.0/16 } accept
# Hermes gateway (accès LAN domestique + cluster + pods k8s pour alertmanager webhook)
tcp dport 8080 ip saddr { 192.168.1.0/24, 192.168.10.0/24, 10.42.0.0/16 } accept