External-Mirrors/kubespray
2
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2026-02-15 02:00:03 -03:30
Code Issues Packages Projects Releases Wiki Activity

add master_allowed_remote_ips (with terraform fmt) (#4022)

Browse Source
This commit is contained in:
rptaylor
2019-04-21 01:57:44 -07:00
committed by Kubernetes Prow Robot
parent 12086744e0
commit 873b5608cf
5 changed files with 14 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
contrib/terraform/openstack/modules/compute/main.tf
View File

@@ -10,12 +10,13 @@ resource "openstack_networking_secgroup_v2" "k8s_master" {
}
resource "openstack_networking_secgroup_rule_v2" "k8s_master" {
count = "${length(var.master_allowed_remote_ips)}"
direction = "ingress"
ethertype = "IPv4"
protocol = "tcp"
port_range_min = "6443"
port_range_max = "6443"
remote_ip_prefix = "0.0.0.0/0"
remote_ip_prefix = "${var.master_allowed_remote_ips[count.index]}"
security_group_id = "${openstack_networking_secgroup_v2.k8s_master.id}"
}

4
contrib/terraform/openstack/modules/compute/variables.tf
View File

@@ -66,6 +66,10 @@ variable "bastion_allowed_remote_ips" {
type = "list"
}
variable "master_allowed_remote_ips" {
type = "list"
}
variable "k8s_allowed_remote_ips" {
type = "list"
}