moving project to gitea
This commit is contained in:
42
terraform/security-group.tf
Normal file
42
terraform/security-group.tf
Normal file
@@ -0,0 +1,42 @@
|
||||
# Import the existing security group instead of creating a new one
|
||||
# Comment out the resource block to use the one that already exists
|
||||
/*
|
||||
*/
|
||||
resource "openstack_networking_secgroup_v2" "secgroup" {
|
||||
name = "ikt210-g04-secgroup"
|
||||
description = "Talos/K8s access"
|
||||
|
||||
}
|
||||
|
||||
# Using existing security group ID defined in compute.tf
|
||||
|
||||
# Security group rules are already created
|
||||
# Commenting these out to avoid recreating them
|
||||
|
||||
resource "openstack_networking_secgroup_rule_v2" "k8s_api" {
|
||||
direction = "ingress"
|
||||
ethertype = "IPv4"
|
||||
protocol = null
|
||||
remote_ip_prefix = "0.0.0.0/0"
|
||||
security_group_id = openstack_networking_secgroup_v2.secgroup.id
|
||||
}
|
||||
|
||||
/*
|
||||
resource "openstack_networking_secgroup_rule_v2" "icmp" {
|
||||
direction = "ingress"
|
||||
ethertype = "IPv4"
|
||||
protocol = "icmp"
|
||||
security_group_id = openstack_networking_secgroup_v2.secgroup.id
|
||||
|
||||
lifecycle {
|
||||
ignore_changes = all
|
||||
}
|
||||
}
|
||||
|
||||
resource "openstack_networking_secgroup_rule_v2" "egress" {
|
||||
direction = "egress"
|
||||
ethertype = "IPv4"
|
||||
remote_ip_prefix = "0.0.0.0/0"
|
||||
security_group_id = openstack_networking_secgroup_v2.secgroup.id
|
||||
}
|
||||
*/
|
||||
Reference in New Issue
Block a user