-
Notifications
You must be signed in to change notification settings - Fork 23
/
network.tf
70 lines (56 loc) · 1.61 KB
/
network.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
##### Not using this, still need to setup the firewall properly to make linkerd work. #####
resource "digitalocean_firewall" "rules" {
name = "microk8s-cluster-firewall-${var.cluster_name}"
tags = [digitalocean_tag.microk8s-node.id]
# allow ssh from anywhere
inbound_rule {
protocol = "tcp"
port_range = "22"
source_addresses = ["0.0.0.0/0", "::/0"]
}
# allow nodes to contact each other
inbound_rule {
protocol = "tcp"
port_range = "1-65535"
source_tags = [digitalocean_tag.microk8s-node.id]
}
# allow nodes to contact each other
inbound_rule {
protocol = "udp"
port_range = "1-65535"
source_tags = [digitalocean_tag.microk8s-node.id]
}
# allow HTTP/HTTPS ingress from load balancer
inbound_rule {
protocol = "tcp"
port_range = "16443"
source_addresses = ["0.0.0.0/0", "::/0"]
}
# allow HTTP/HTTPS ingress
inbound_rule {
protocol = "tcp"
port_range = "80"
source_addresses = ["0.0.0.0/0", "::/0"]
}
inbound_rule {
protocol = "tcp"
port_range = "443"
source_addresses = ["0.0.0.0/0", "::/0"]
}
# allow all outbound traffic
outbound_rule {
protocol = "tcp"
port_range = "1-65535"
destination_addresses = ["0.0.0.0/0", "::/0"]
}
outbound_rule {
protocol = "udp"
port_range = "1-65535"
destination_addresses = ["0.0.0.0/0", "::/0"]
}
outbound_rule {
protocol = "icmp"
port_range = "1-65535"
destination_addresses = ["0.0.0.0/0", "::/0"]
}
}