title: Open port for internal_address in Rancher/Kubernates (RKE)?
body: <p>I have the following configuration to setup the cluster using <a href="https://rancher.com/docs/rancher/v2.x/en/installation/ha/kubernetes-rke/" rel="nofollow noreferrer">Rancher (RKE)</a>.</p>
  
  <p>rancher-config.yml</p>
  
  <pre><code>nodes:
    - address: 192.168.88.204
      internal_address: 172.16.22.12
      user: dockeruser
      role: [controlplane,worker,etcd]
    - address: 192.168.88.203
      internal_address: 172.16.32.37
      user: dockeruser
      role: [controlplane,worker,etcd]
    - address: 192.168.88.202
      internal_address: 172.16.42.73
      user: dockeruser
      role: [controlplane,worker,etcd]
  
  services:
    etcd:
      snapshot: true
      creation: 6h
      retention: 24h 
  </code></pre>
  
  <p>According <a href="https://rancher.com/docs/rancher/v2.x/en/installation/requirements/" rel="nofollow noreferrer">Rancher Networking</a>, I already open the following port for all nodes(192.168.88.204, 192.168.88.203, 192.168.88.202) as firewall-services.</p>
  
  <p>node-firewall.xml</p>
  
  <pre><code>&lt;?xml version="1.0" encoding="utf-8"?&gt;
  &lt;service&gt;
      &lt;port port="2376" protocol="tcp"/&gt;
      &lt;port port="2379" protocol="tcp"/&gt;
      &lt;port port="2380" protocol="tcp"/&gt;
      &lt;port port="8472" protocol="udp"/&gt;
      &lt;port port="9099" protocol="tcp"/&gt;
      &lt;port port="10250" protocol="tcp"/&gt;
      &lt;port port="443" protocol="tcp"/&gt;
      &lt;port port="6443" protocol="tcp"/&gt;
      &lt;port port="8472" protocol="udp"/&gt;
      &lt;port port="6443" protocol="tcp"/&gt;
      &lt;port port="10254" protocol="tcp"/&gt;
      &lt;port port="30000-32767" protocol="tcp"/&gt;
  &lt;/service&gt;
  
  -&gt; commmend
  
  firewall-offline-cmd --new-service-from-file=node-firewall.xml --name=node-firewall
  firewall-cmd --reload
  firewall-cmd --add-service node-firewall
  </code></pre>
  
  <p>My RKE is installed on 192.168.88.151. For RKE -> </p>
  
  <pre><code>rancher-firewall.xml
  
  &lt;?xml version="1.0" encoding="utf-8"?&gt;
  &lt;service&gt;
      &lt;port port="80" protocol="tcp"/&gt;
      &lt;port port="433" protocol="tcp"/&gt;
      &lt;port port="22" protocol="tcp"/&gt;
      &lt;port port="2376" protocol="tcp"/&gt;
      &lt;port port="6443" protocol="tcp"/&gt;
  &lt;/service&gt;
  firewall-offline-cmd --new-service-from-file=rancher-firewall.xml --name=rancher-firewall
  firewall-cmd --reload
  firewall-cmd --add-service rancher-firewall
  </code></pre>
  
  <p>So, I run the following commend to up my <code>RKE</code></p>
  
  <pre><code>rke up --config ./rancher-config.yml
  </code></pre>
  
  <p>log is</p>
  
  <pre><code>[root@localhost ~]# rke up --config ./rancher-config.yml
  INFO[0000] Building Kubernetes cluster
  INFO[0000] [dialer] Setup tunnel for host [192.168.88.204]
  INFO[0000] [dialer] Setup tunnel for host [192.168.88.203]
  INFO[0000] [dialer] Setup tunnel for host [192.168.88.202]
  INFO[0001] [network] Deploying port listener containers
  INFO[0001] [network] Port listener containers deployed successfully
  INFO[0001] [network] Running etcd &lt;-&gt; etcd port checks
  INFO[0001] [network] Successfully started [rke-port-checker] container on host [192.168.88.202]
  INFO[0001] [network] Successfully started [rke-port-checker] container on host [192.168.88.204]
  INFO[0001] [network] Successfully started [rke-port-checker] container on host [192.168.88.203]
  FATA[0016] [network] Host [192.168.88.202] is not able to connect to the following ports: 
              [172.16.22.12:2379, 172.16.22.12:2380, 172.16.32.37:2379, 172.16.32.37:2380, 172.16.42.73:2380, 172.16.42.73:2379]. 
              Please check network policies and firewall rules
  </code></pre>
  
  <p>My question is how to open the port for the <code>internal_address</code> for all nodes in <code>kubernates</code> cluster?</p>