From 28a6e4dd17625e748f4bc2fad6cd9503e9a9ebe4 Mon Sep 17 00:00:00 2001
From: Sheogorath <sheogorath@shivering-isles.com>
Date: Wed, 6 Oct 2021 02:28:36 +0200
Subject: [PATCH] terraform: Clean up ICMP
---
terraform/firewall.tf | 39 +++++++++++++++++++++------------------
1 file changed, 21 insertions(+), 18 deletions(-)
diff --git a/terraform/firewall.tf b/terraform/firewall.tf
index 4bc524580..8e1e8a138 100644
--- a/terraform/firewall.tf
+++ b/terraform/firewall.tf
@@ -9,12 +9,13 @@ resource "hcloud_firewall" "k8s-node" {
#
# Network reachability tests
rule {
- direction = "in"
- protocol = "icmp"
- source_ips = [
- "0.0.0.0/0",
- "::/0"
- ]
+ description = "ICMP"
+ direction = "in"
+ protocol = "icmp"
+ source_ips = [
+ "0.0.0.0/0",
+ "::/0"
+ ]
}
rule {
description = "Kublet"
@@ -66,12 +67,13 @@ resource "hcloud_firewall" "k8s-master" {
#
# Network reachability tests
rule {
- direction = "in"
- protocol = "icmp"
- source_ips = [
- "0.0.0.0/0",
- "::/0"
- ]
+ description = "ICMP"
+ direction = "in"
+ protocol = "icmp"
+ source_ips = [
+ "0.0.0.0/0",
+ "::/0"
+ ]
}
# Kubernetes API
rule {
@@ -113,12 +115,13 @@ resource "hcloud_firewall" "k8s-ingress" {
#
# Network reachability tests
rule {
- direction = "in"
- protocol = "icmp"
- source_ips = [
- "0.0.0.0/0",
- "::/0"
- ]
+ description = "ICMP"
+ direction = "in"
+ protocol = "icmp"
+ source_ips = [
+ "0.0.0.0/0",
+ "::/0"
+ ]
}
rule {
direction = "in"
--
GitLab