fix - rke2 metallb open

modules/nixos/services/rke2/default.nix

@@ -27,6 +27,9 @@ in
       2381 # etcd Metrics Port
       10250 # kubelet metrics
       9099 # Canal CNI health checks
+
+      # MetalLB
+      7946 # memberlist
     ];
 
     networking.firewall.allowedUDPPorts = mkIf cfg.openFirewall [
@@ -34,6 +37,9 @@ in
       8472 # Canal CNI with VXLAN
       # 51820 # Canal CNI with WireGuard IPv4 (if using encryption)
       # 51821 # Canal CNI with WireGuard IPv6 (if using encryption)
+
+      # MetalLB
+      7946 # memberlist
     ];
   };
 }