Skip to content

Commit b421269

Browse files
committed
infra: NSG 설정 변경
1 parent 6753ee7 commit b421269

File tree

2 files changed

+28
-14
lines changed

2 files changed

+28
-14
lines changed

.github/workflows/yappu-oci-dev-cd.yaml

Lines changed: 14 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -89,13 +89,20 @@ jobs:
8989
run: |
9090
~/bin/oci network nsg rules add \
9191
--nsg-id ${{ secrets.OCI_DEV_NSG_OCID }} \
92-
--direction INGRESS \
93-
--protocol 6 \
94-
--source ${{ steps.ip.outputs.ipv4 }}/32 \
95-
--source-type CIDR_BLOCK \
96-
--tcp-options '{"destinationPortRange": {"min": 22, "max": 22}}' \
97-
--description "GitHub Actions temporary access" \
98-
--is-stateless false
92+
--security-rules '[{
93+
"direction": "INGRESS",
94+
"protocol": "6",
95+
"source": "${{ steps.ip.outputs.ipv4 }}/32",
96+
"sourceType": "CIDR_BLOCK",
97+
"tcpOptions": {
98+
"destinationPortRange": {
99+
"min": 22,
100+
"max": 22
101+
}
102+
},
103+
"description": "GitHub Actions temporary access",
104+
"isStateless": false
105+
}]'
99106
100107
- name: Wait for NSG rule to propagate
101108
run: sleep 10

.github/workflows/yappu-oci-prod-cd.yaml

Lines changed: 14 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -87,13 +87,20 @@ jobs:
8787
run: |
8888
~/bin/oci network nsg rules add \
8989
--nsg-id ${{ secrets.OCI_PROD_NSG_OCID }} \
90-
--direction INGRESS \
91-
--protocol 6 \
92-
--source ${{ steps.ip.outputs.ipv4 }}/32 \
93-
--source-type CIDR_BLOCK \
94-
--tcp-options '{"destinationPortRange": {"min": 22, "max": 22}}' \
95-
--description "GitHub Actions temporary access" \
96-
--is-stateless false
90+
--security-rules '[{
91+
"direction": "INGRESS",
92+
"protocol": "6",
93+
"source": "${{ steps.ip.outputs.ipv4 }}/32",
94+
"sourceType": "CIDR_BLOCK",
95+
"tcpOptions": {
96+
"destinationPortRange": {
97+
"min": 22,
98+
"max": 22
99+
}
100+
},
101+
"description": "GitHub Actions temporary access",
102+
"isStateless": false
103+
}]'
97104
98105
- name: Wait for NSG rule to propagate
99106
run: sleep 10

0 commit comments

Comments
 (0)