Skip to content

Commit dc41e91

Browse files
robo-caphyder
authored andcommitted
feat: added rules to allow UDP to be used for node port ranges
1 parent aea0623 commit dc41e91

File tree

3 files changed

+12
-0
lines changed

3 files changed

+12
-0
lines changed

modules/network/nsg-loadbalancers-int.tf

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -19,6 +19,9 @@ locals {
1919
"Allow TCP egress from internal load balancers to workers for Node Ports" : {
2020
protocol = local.tcp_protocol, port_min = local.node_port_min, port_max = local.node_port_max, destination = local.worker_nsg_id, destination_type = local.rule_type_nsg,
2121
},
22+
"Allow UDP egress from internal load balancers to workers for Node Ports" : {
23+
protocol = local.udp_protocol, port_min = local.node_port_min, port_max = local.node_port_max, destination = local.worker_nsg_id, destination_type = local.rule_type_nsg,
24+
},
2225
"Allow ICMP egress from internal load balancers to worker nodes for path discovery" : {
2326
protocol = local.icmp_protocol, port = local.all_ports, destination = local.worker_nsg_id, destination_type = local.rule_type_nsg,
2427
},

modules/network/nsg-loadbalancers-pub.tf

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -19,6 +19,9 @@ locals {
1919
"Allow TCP egress from public load balancers to workers nodes for NodePort traffic" : {
2020
protocol = local.tcp_protocol, port_min = local.node_port_min, port_max = local.node_port_max, destination = local.worker_nsg_id, destination_type = local.rule_type_nsg,
2121
},
22+
"Allow UDP egress from public load balancers to workers nodes for NodePort traffic" : {
23+
protocol = local.udp_protocol, port_min = local.node_port_min, port_max = local.node_port_max, destination = local.worker_nsg_id, destination_type = local.rule_type_nsg,
24+
},
2225
"Allow TCP egress from public load balancers to worker nodes for health checks" : {
2326
protocol = local.tcp_protocol, port = local.health_check_port, destination = local.worker_nsg_id, destination_type = local.rule_type_nsg,
2427
},

modules/network/nsg-workers.tf

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -66,6 +66,9 @@ locals {
6666
"Allow TCP ingress to workers from internal load balancers" : {
6767
protocol = local.tcp_protocol, port_min = local.node_port_min, port_max = local.node_port_max, source = local.int_lb_nsg_id, source_type = local.rule_type_nsg,
6868
},
69+
"Allow UDP ingress to workers from internal load balancers" : {
70+
protocol = local.udp_protocol, port_min = local.node_port_min, port_max = local.node_port_max, source = local.int_lb_nsg_id, source_type = local.rule_type_nsg,
71+
},
6972
"Allow TCP ingress to workers for health check from internal load balancers" : {
7073
protocol = local.tcp_protocol, port = local.health_check_port, source = local.int_lb_nsg_id, source_type = local.rule_type_nsg,
7174
},
@@ -75,6 +78,9 @@ locals {
7578
"Allow TCP ingress to workers from public load balancers" : {
7679
protocol = local.tcp_protocol, port_min = local.node_port_min, port_max = local.node_port_max, source = local.pub_lb_nsg_id, source_type = local.rule_type_nsg,
7780
},
81+
"Allow UDP ingress to workers from public load balancers" : {
82+
protocol = local.udp_protocol, port_min = local.node_port_min, port_max = local.node_port_max, source = local.pub_lb_nsg_id, source_type = local.rule_type_nsg,
83+
},
7884
"Allow TCP ingress to workers for health check from public load balancers" : {
7985
protocol = local.tcp_protocol, port = local.health_check_port, source = local.pub_lb_nsg_id, source_type = local.rule_type_nsg,
8086
},

0 commit comments

Comments
 (0)