Skip to content

Commit bfc700a

Browse files
committed
Fix missing LB rule
1 parent 7d0c29a commit bfc700a

File tree

1 file changed

+11
-2
lines changed

1 file changed

+11
-2
lines changed

deploy/devops/tf-env/oke.tf

Lines changed: 11 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -13,6 +13,14 @@ module "oke" {
1313
create_iam_operator_policy = "never"
1414
create_iam_worker_policy = "never"
1515
# Network module - VCN
16+
subnets = {
17+
operator = {
18+
create = "never"
19+
}
20+
}
21+
nsgs = {
22+
operator = { create = "never" }
23+
}
1624
assign_dns = true
1725
create_vcn = true
1826
vcn_cidrs = ["10.22.0.0/16"]
@@ -21,7 +29,8 @@ module "oke" {
2129
lockdown_default_seclist = true
2230
allow_rules_public_lb ={
2331
"Allow TCP ingress to public load balancers for SSL traffic from anywhere" : { protocol = 6, port = 443, source="0.0.0.0/0", source_type="CIDR_BLOCK"},
24-
"Allow TCP ingress to public load balancers for HTTP traffic from anywhere" : { protocol = 6, port = 80, source="0.0.0.0/0", source_type="CIDR_BLOCK"}
32+
"Allow TCP ingress to public load balancers for HTTP traffic from anywhere" : { protocol = 6, port = 80, source="0.0.0.0/0", source_type="CIDR_BLOCK"},
33+
"Allow TCP egress from public load balancers to worker nodes for health checks" : {direction = "EGRESS", protocol = 6, destination = "10.22.144.0/20", destination_type="CIDR_BLOCK"}
2534
}
2635
# Network module - security
2736
allow_node_port_access = true
@@ -68,5 +77,5 @@ module "oke" {
6877
oci = oci
6978
oci.home = oci.home_region
7079
}
71-
7280
}
81+

0 commit comments

Comments
 (0)