mirror of
https://github.com/phfroidmont/self-hosting.git
synced 2025-12-25 13:46:59 +01:00
39 lines
1 KiB
HCL
39 lines
1 KiB
HCL
# resource "scaleway_security_group" "k8s-sg" {
|
|
# name = "Kubernetes"
|
|
# description = "Kubernetes cluster nodes security group"
|
|
# enable_default_security = true
|
|
# stateful = true
|
|
# inbound_default_policy = "drop"
|
|
# outbound_default_policy = "accept"
|
|
# }
|
|
|
|
|
|
# resource "scaleway_security_group_rule" "k8s-sg-rule-ssh" {
|
|
# security_group = "${scaleway_security_group.k8s-sg.id}"
|
|
|
|
# action = "accept"
|
|
# direction = "inbound"
|
|
# ip_range = "0.0.0.0/0"
|
|
# protocol = "TCP"
|
|
# port = 22
|
|
# }
|
|
|
|
# resource "scaleway_security_group_rule" "k8s-sg-rule-http" {
|
|
# security_group = "${scaleway_security_group.k8s-sg.id}"
|
|
|
|
# action = "accept"
|
|
# direction = "inbound"
|
|
# ip_range = "0.0.0.0/0"
|
|
# protocol = "TCP"
|
|
# port = 80
|
|
# }
|
|
|
|
# resource "scaleway_security_group_rule" "k8s-sg-rule-https" {
|
|
# security_group = "${scaleway_security_group.k8s-sg.id}"
|
|
|
|
# action = "accept"
|
|
# direction = "inbound"
|
|
# ip_range = "0.0.0.0/0"
|
|
# protocol = "TCP"
|
|
# port = 443
|
|
# }
|