Why are firewall rules for traffic between nodes on the private network created

[fabian-piribauer]

hetzner-k3s/src/hetzner/firewall/create.cr

Lines 136 to 151 in 8998e10

	{
	:description => "Allow all TCP traffic between nodes on the private network",
	:direction => "in",
	:protocol => "tcp",
	:port => "any",
	:source_ips => [private_network.subnet],
	:destination_ips => [] of String,
	},
	{
	:description => "Allow all UDP traffic between nodes on the private network",
	:direction => "in",
	:protocol => "udp",
	:port => "any",
	:source_ips => [private_network.subnet],
	:destination_ips => [] of String,
	},

If I'm not missing anything, private networks are not effected by Hetzner's Cloud Firewall. See https://docs.hetzner.com/cloud/firewalls/faq#can-firewalls-secure-traffic-to-my-private-hetzner-cloud-networks

Can Firewalls secure traffic to my private Hetzner Cloud Networks?
Not yet, because we consider the private networks to be "secure". We might later add the ability to secure private Cloud Networks.

If those are not created for a reason I'm overlooking, they should be removed.

[vitobotta]

It's likely that something has changed in that area, and those firewall rules do not cause any harm if they are anyway ignored currently. The same page you linked to says "We might later add the ability to secure private Cloud Networks.", so there is no harm leaving those rules in place if they are going to become useful in the future. Why do you think they "should" be removed?