fix: change network policy (#321)

vitaliimd · p1gmale0n · commit b0c9826ac80e · 2023-08-24T11:43:14.000+06:00
* change network policy

* feature/320-fix tfsec
diff --git a/terraform/layer1-aws/aws-vpc.tf b/terraform/layer1-aws/aws-vpc.tf
@@ -14,6 +14,7 @@ data "aws_security_group" "default" {
 }
 
 #tfsec:ignore:aws-ec2-no-public-ip-subnet
+#tfsec:ignore:aws-ec2-require-vpc-flow-logs-for-all-vpcs
 module "vpc" {
   source  = "terraform-aws-modules/vpc/aws"
   version = "3.12.0"
diff --git a/terraform/layer2-k8s/eks-external-secrets.tf b/terraform/layer2-k8s/eks-external-secrets.tf
@@ -107,7 +107,7 @@ module "external_secrets_namespace" {
       ingress = {
         ports = [
           {
-            port     = "9443"
+            port     = "10250"
             protocol = "TCP"
           }
         ]

Original file line number	Diff line number	Diff line change
`@@ -14,6 +14,7 @@ data "aws_security_group" "default" {`
`14`	`14`	`}`
`15`	`15`
`16`	`16`	`#tfsec:ignore:aws-ec2-no-public-ip-subnet`
	`17`	`+#tfsec:ignore:aws-ec2-require-vpc-flow-logs-for-all-vpcs`
`17`	`18`	`module "vpc" {`
`18`	`19`	`source = "terraform-aws-modules/vpc/aws"`
`19`	`20`	`version = "3.12.0"`
Original file line number	Diff line number	Diff line change
`@@ -107,7 +107,7 @@ module "external_secrets_namespace" {`
`107`	`107`	`ingress = {`
`108`	`108`	`ports = [`
`109`	`109`	`{`
`110`		`- port = "9443"`
	`110`	`+ port = "10250"`
`111`	`111`	`protocol = "TCP"`
`112`	`112`	`}`
`113`	`113`	`]`