From c97e895b87dbfa47927f866f5f39dafb0c0ffa59 Mon Sep 17 00:00:00 2001 From: alkatrazz Date: Thu, 14 May 2026 21:37:48 +0200 Subject: [PATCH] =?UTF-8?q?fix(nftables):=20ouvre=20port=209093=20pour=20A?= =?UTF-8?q?lertManager=20webhook=20=E2=86=92=20Hermes=20monitor?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Les pods AlertManager (10.42.0.0/16) ne pouvaient pas joindre le webhook sur storage-01:9093 — alertes Prometheus reçues mais jamais transmises à ask-agent monitor. Port 9093 ajouté pour pods k8s + nœuds cluster. Co-Authored-By: Claude Sonnet 4.6 --- ansible/roles/gateway/templates/nftables.conf.j2 | 3 +++ 1 file changed, 3 insertions(+) diff --git a/ansible/roles/gateway/templates/nftables.conf.j2 b/ansible/roles/gateway/templates/nftables.conf.j2 index 24c9b24..a5725af 100644 --- a/ansible/roles/gateway/templates/nftables.conf.j2 +++ b/ansible/roles/gateway/templates/nftables.conf.j2 @@ -35,6 +35,9 @@ table inet filter { # Monitoring — node_exporter (scraping par Prometheus : nœuds cluster + pods 10.42/16) tcp dport 9100 ip saddr { 192.168.10.0/24, 10.42.0.0/16 } accept + # AlertManager webhook → Hermes monitor (pods k8s 10.42/16 + nœuds cluster) + tcp dport 9093 ip saddr { 192.168.10.0/24, 10.42.0.0/16 } accept + # Hermes gateway (accès LAN domestique + cluster + pods k8s pour alertmanager webhook) tcp dport 8080 ip saddr { 192.168.1.0/24, 192.168.10.0/24, 10.42.0.0/16 } accept