mirror of
https://github.com/farcasclaudiu/terraform-course.git
synced 2026-06-29 09:02:13 +03:00
@@ -2,7 +2,7 @@
|
||||
resource "aws_security_group" "demo-node" {
|
||||
name = "terraform-eks-demo-node"
|
||||
description = "Security group for all nodes in the cluster"
|
||||
vpc_id = "${module.vpc.vpc_id}"
|
||||
vpc_id = module.vpc.vpc_id
|
||||
|
||||
egress {
|
||||
from_port = 0
|
||||
@@ -11,20 +11,18 @@ resource "aws_security_group" "demo-node" {
|
||||
cidr_blocks = ["0.0.0.0/0"]
|
||||
}
|
||||
|
||||
tags = "${
|
||||
map(
|
||||
"Name", "terraform-eks-demo-node",
|
||||
"kubernetes.io/cluster/${var.cluster-name}", "owned",
|
||||
)
|
||||
}"
|
||||
tags = {
|
||||
"Name" = "terraform-eks-demo-node"
|
||||
"kubernetes.io/cluster/${var.cluster-name}" = "owned"
|
||||
}
|
||||
}
|
||||
|
||||
resource "aws_security_group_rule" "demo-node-ingress-self" {
|
||||
description = "Allow node to communicate with each other"
|
||||
from_port = 0
|
||||
protocol = "-1"
|
||||
security_group_id = "${aws_security_group.demo-node.id}"
|
||||
source_security_group_id = "${aws_security_group.demo-node.id}"
|
||||
security_group_id = aws_security_group.demo-node.id
|
||||
source_security_group_id = aws_security_group.demo-node.id
|
||||
to_port = 65535
|
||||
type = "ingress"
|
||||
}
|
||||
@@ -33,8 +31,8 @@ resource "aws_security_group_rule" "demo-node-ingress-cluster" {
|
||||
description = "Allow worker Kubelets and pods to receive communication from the cluster control plane"
|
||||
from_port = 1025
|
||||
protocol = "tcp"
|
||||
security_group_id = "${aws_security_group.demo-node.id}"
|
||||
source_security_group_id = "${aws_security_group.demo-cluster.id}"
|
||||
security_group_id = aws_security_group.demo-node.id
|
||||
source_security_group_id = aws_security_group.demo-cluster.id
|
||||
to_port = 65535
|
||||
type = "ingress"
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user