Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: add support to reference module nsgs in the nsg rules #962

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

robo-cap
Copy link
Member

@robo-cap robo-cap commented Nov 18, 2024

Below is an example of how this can be used.

allow_rules_workers = {
    "Allow UDP ingress to workers for port range 50000-52767 from existing NSG" : {
      protocol = 17, destination_port_min = 50000, destination_port_max=52767, source = "ocid1.networksecuritygroup.oc1.eu-frankfurt-1.aaaaaaaai6z4le2ji7dkpmuwff4525b734wrjlifjqkrzlr5qctgxdsyoyra", source_type = "NETWORK_SECURITY_GROUP"
    },
  }

allow_rules_public_lb = {
    "Allow UDP egress to workers port range 50000-52767 from public LBs" : {
      protocol = 17, destination_port_min = 50000, destination_port_max=52767, destination = "workers", destination_type = "NETWORK_SECURITY_GROUP"
    },
  }

The supported nsgs to be referenced are: bastion, cp, int_lb, pub_lb, workers, operator, fss (when these are created).

@oracle-contributor-agreement oracle-contributor-agreement bot added the OCA Verified All contributors have signed the Oracle Contributor Agreement. label Nov 18, 2024
@hyder
Copy link
Contributor

hyder commented Dec 2, 2024

If I understand this correctly, you are adding the custom rule and applying it in a 2nd terraform run. Is that correct?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
OCA Verified All contributors have signed the Oracle Contributor Agreement.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants