Skip to content

Commit 51273fe

Browse files
robo-caphyder
authored andcommitted
Fix OKE CP NSG issue
1 parent 58006ae commit 51273fe

File tree

1 file changed

+1
-4
lines changed

1 file changed

+1
-4
lines changed

modules/network/nsg-controlplane.tf

Lines changed: 1 addition & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -61,10 +61,7 @@ locals {
6161
},
6262
"Allow TCP egress from OKE control plane to pods" : {
6363
protocol = local.tcp_protocol, port = local.all_ports, destination = local.pod_nsg_id, destination_type = local.rule_type_nsg,
64-
},
65-
"Allow TCP ingress from pods to kube-apiserver" : {
66-
protocol = local.tcp_protocol, port = local.oke_port, source = local.pod_nsg_id, source_type = local.rule_type_nsg,
67-
},
64+
}
6865
} : {},
6966
(var.allow_bastion_cluster_access && local.bastion_nsg_enabled) ? {
7067
"Allow TCP ingress to kube-apiserver from bastion host" = {

0 commit comments

Comments
 (0)