Skip to content
Snippets Groups Projects
Verified Commit e7021980 authored by Sheogorath's avatar Sheogorath :european_castle:
Browse files

terrafrom: Finish moving descriptions for k8s-master and k8s-ingress

parent 28a6e4dd
No related branches found
No related tags found
No related merge requests found
......@@ -75,29 +75,29 @@ resource "hcloud_firewall" "k8s-master" {
"::/0"
]
}
# Kubernetes API
rule {
description = "Kubernetes API"
direction = "in"
protocol = "tcp"
port = "6443"
source_ips = [for s in concat([hcloud_load_balancer.lb.ipv4],module.nodes.ipv4_addresses) : "${s}/32"]
}
# etcd server and peer ports + monitoring
rule {
description = "etcd"
direction = "in"
protocol = "tcp"
port = "2379-2381"
source_ips = [for s in module.nodes.ipv4_addresses : "${s}/32"]
}
# kube-scheduler
rule {
description = "kube-scheduler"
direction = "in"
protocol = "tcp"
port = "10251"
source_ips = [for s in module.nodes.ipv4_addresses : "${s}/32"]
}
# kube-controller-manager
rule {
description = "kube-controller-manager"
direction = "in"
protocol = "tcp"
port = "10252"
......@@ -124,12 +124,14 @@ resource "hcloud_firewall" "k8s-ingress" {
]
}
rule {
description = "Public HTTP"
direction = "in"
protocol = "tcp"
port = "80"
source_ips = [for s in [hcloud_load_balancer.lb.ipv4] : "${s}/32"]
}
rule {
description = "Public HTTPS"
direction = "in"
protocol = "tcp"
port = "443"
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment