Skip to content
Snippets Groups Projects
Verified Commit e7021980 authored by Sheogorath's avatar Sheogorath :european_castle:
Browse files

terrafrom: Finish moving descriptions for k8s-master and k8s-ingress

parent 28a6e4dd
No related branches found
No related tags found
No related merge requests found
...@@ -75,29 +75,29 @@ resource "hcloud_firewall" "k8s-master" { ...@@ -75,29 +75,29 @@ resource "hcloud_firewall" "k8s-master" {
"::/0" "::/0"
] ]
} }
# Kubernetes API
rule { rule {
description = "Kubernetes API"
direction = "in" direction = "in"
protocol = "tcp" protocol = "tcp"
port = "6443" port = "6443"
source_ips = [for s in concat([hcloud_load_balancer.lb.ipv4],module.nodes.ipv4_addresses) : "${s}/32"] source_ips = [for s in concat([hcloud_load_balancer.lb.ipv4],module.nodes.ipv4_addresses) : "${s}/32"]
} }
# etcd server and peer ports + monitoring
rule { rule {
description = "etcd"
direction = "in" direction = "in"
protocol = "tcp" protocol = "tcp"
port = "2379-2381" port = "2379-2381"
source_ips = [for s in module.nodes.ipv4_addresses : "${s}/32"] source_ips = [for s in module.nodes.ipv4_addresses : "${s}/32"]
} }
# kube-scheduler
rule { rule {
description = "kube-scheduler"
direction = "in" direction = "in"
protocol = "tcp" protocol = "tcp"
port = "10251" port = "10251"
source_ips = [for s in module.nodes.ipv4_addresses : "${s}/32"] source_ips = [for s in module.nodes.ipv4_addresses : "${s}/32"]
} }
# kube-controller-manager
rule { rule {
description = "kube-controller-manager"
direction = "in" direction = "in"
protocol = "tcp" protocol = "tcp"
port = "10252" port = "10252"
...@@ -124,12 +124,14 @@ resource "hcloud_firewall" "k8s-ingress" { ...@@ -124,12 +124,14 @@ resource "hcloud_firewall" "k8s-ingress" {
] ]
} }
rule { rule {
description = "Public HTTP"
direction = "in" direction = "in"
protocol = "tcp" protocol = "tcp"
port = "80" port = "80"
source_ips = [for s in [hcloud_load_balancer.lb.ipv4] : "${s}/32"] source_ips = [for s in [hcloud_load_balancer.lb.ipv4] : "${s}/32"]
} }
rule { rule {
description = "Public HTTPS"
direction = "in" direction = "in"
protocol = "tcp" protocol = "tcp"
port = "443" port = "443"
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment