port open all

Author: gynagarro

terraform/modules/k8s-cluster/main.tf

@@ -24,14 +24,16 @@ resource "aws_instance" "bastion" {
   depends_on = [tls_private_key.node-key]
 }
 
-resource "null_resource" "copy-pem" {
+resource "null_resource" "create-pem" {
   provisioner "local-exec" {
     command = <<EOT
       echo '${tls_private_key.node-key.private_key_openssh}' > ./node-key.pem
       chmod 600 ./node-key.pem
     EOT
   }
+}
 
+resource "null_resource" "copy-pem" {
   # Now use the file provisioner to upload the private key to the bastion host
   provisioner "file" {
     source      = "./node-key.pem"  # Use the local file created by local-exec
@@ -57,7 +59,7 @@ resource "null_resource" "copy-pem" {
     ]
   }
 
-  depends_on = [aws_instance.bastion]
+  depends_on = [null_resource.create-pem]
 } 
 
 resource "aws_instance" "master" {

terraform/modules/security-groups/main.tf

@@ -37,39 +37,39 @@ resource "aws_security_group" "master_sg" {
     from_port        = 6443
     to_port          = 6443
     protocol         = "tcp"
-    cidr_blocks      = [var.private_subnet_cidr]
+    cidr_blocks      = ["0.0.0.0/0"]
   }
 
   ingress {
     description      = "ETCD"
     from_port        = 2379
     to_port          = 2380
     protocol         = "tcp"
-    cidr_blocks      = [var.private_subnet_cidr]
+    cidr_blocks      = ["0.0.0.0/0"]
   }
 
   ingress {
     description      = "Weavenet TCP"
     from_port        = 6783
     to_port          = 6783
     protocol         = "tcp"
-    cidr_blocks      = [var.private_subnet_cidr]
+    cidr_blocks      = ["0.0.0.0/0"]
   }
 
   ingress {
     description      = "Weavenet TCP"
     from_port        = 6784
     to_port          = 6784
     protocol         = "udp"
-    cidr_blocks      = [var.private_subnet_cidr]
+    cidr_blocks      = ["0.0.0.0/0"]
   }
 
   ingress {
     description      = "Kubelet API"
     from_port        = 10248
     to_port          = 10260
     protocol         = "tcp"
-    cidr_blocks      = [var.private_subnet_cidr]
+    cidr_blocks      = ["0.0.0.0/0"]
   }
 
   egress {