From e702198044c0ea4e1ce4ea11b7a4dbd57f0d783e Mon Sep 17 00:00:00 2001
From: Sheogorath <sheogorath@shivering-isles.com>
Date: Wed, 6 Oct 2021 02:31:34 +0200
Subject: [PATCH] terrafrom: Finish moving descriptions for k8s-master and
k8s-ingress
---
terraform/firewall.tf | 10 ++++++----
1 file changed, 6 insertions(+), 4 deletions(-)
diff --git a/terraform/firewall.tf b/terraform/firewall.tf
index 8e1e8a138..39e8b028e 100644
--- a/terraform/firewall.tf
+++ b/terraform/firewall.tf
@@ -75,29 +75,29 @@ resource "hcloud_firewall" "k8s-master" {
"::/0"
]
}
- # Kubernetes API
rule {
+ description = "Kubernetes API"
direction = "in"
protocol = "tcp"
port = "6443"
source_ips = [for s in concat([hcloud_load_balancer.lb.ipv4],module.nodes.ipv4_addresses) : "${s}/32"]
}
- # etcd server and peer ports + monitoring
rule {
+ description = "etcd"
direction = "in"
protocol = "tcp"
port = "2379-2381"
source_ips = [for s in module.nodes.ipv4_addresses : "${s}/32"]
}
- # kube-scheduler
rule {
+ description = "kube-scheduler"
direction = "in"
protocol = "tcp"
port = "10251"
source_ips = [for s in module.nodes.ipv4_addresses : "${s}/32"]
}
- # kube-controller-manager
rule {
+ description = "kube-controller-manager"
direction = "in"
protocol = "tcp"
port = "10252"
@@ -124,12 +124,14 @@ resource "hcloud_firewall" "k8s-ingress" {
]
}
rule {
+ description = "Public HTTP"
direction = "in"
protocol = "tcp"
port = "80"
source_ips = [for s in [hcloud_load_balancer.lb.ipv4] : "${s}/32"]
}
rule {
+ description = "Public HTTPS"
direction = "in"
protocol = "tcp"
port = "443"
--
GitLab