This repository was archived by the owner on Nov 1, 2023. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 57
/
Copy pathsg.tf
90 lines (73 loc) · 2.43 KB
/
sg.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
# Master
resource "scaleway_security_group" "master_security_group" {
name = "sg.master.${terraform.workspace}"
description = "Master security group"
}
resource "scaleway_security_group_rule" "smtp_master_drop" {
security_group = "${scaleway_security_group.master_security_group.id}"
action = "drop"
direction = "inbound"
ip_range = "0.0.0.0/0"
protocol = "TCP"
port = 25
}
resource "scaleway_security_group_rule" "ssh_master_accept" {
count = "${length(var.ip_admin)}"
security_group = "${scaleway_security_group.master_security_group.id}"
action = "accept"
direction = "inbound"
ip_range = "${element(var.ip_admin, count.index)}"
protocol = "TCP"
port = 22
}
resource "scaleway_security_group_rule" "https_master_dashboard_accept" {
security_group = "${scaleway_security_group.master_security_group.id}"
action = "accept"
direction = "inbound"
ip_range = "${element(var.ip_admin, count.index)}"
protocol = "TCP"
port = 8888
}
resource "scaleway_security_group_rule" "https_master_management_accept" {
security_group = "${scaleway_security_group.master_security_group.id}"
action = "accept"
direction = "inbound"
ip_range = "${element(var.ip_admin, count.index)}"
protocol = "TCP"
port = 6443
}
resource "scaleway_security_group_rule" "http_master_podinfo_accept" {
security_group = "${scaleway_security_group.master_security_group.id}"
action = "accept"
direction = "inbound"
ip_range = "${element(var.ip_admin, count.index)}"
protocol = "TCP"
port = 31190
}
resource "scaleway_security_group_rule" "icmp_master_drop" {
security_group = "${scaleway_security_group.master_security_group.id}"
action = "drop"
direction = "inbound"
ip_range = "0.0.0.0/0"
protocol = "ICMP"
}
# Nodes
resource "scaleway_security_group" "node_security_group" {
name = "sg.node.${terraform.workspace}"
description = "node security group"
}
resource "scaleway_security_group_rule" "ssh_node_accept" {
security_group = "${scaleway_security_group.node_security_group.id}"
action = "accept"
direction = "inbound"
ip_range = "${element(var.ip_admin, count.index)}"
protocol = "TCP"
port = 22
}
resource "scaleway_security_group_rule" "icmp_node_drop" {
security_group = "${scaleway_security_group.node_security_group.id}"
action = "drop"
direction = "inbound"
ip_range = "0.0.0.0/0"
protocol = "ICMP"
}