Skip to content
Jump to bottom

Setup sg it linux base #8

Merged
merged 6 commits into from
Aug 5, 2020
Merged

Setup sg it linux base #8

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
8b4debc
initial
Jun 3, 2020
9757fd3
add smtp port 25
Jun 3, 2020
ce7da68
add tf_module_version
Jun 3, 2020
ab83641
fix cidr range
Jun 3, 2020
7e72d07
fix comments
Jun 3, 2020
a36b468
refresh
badra001 Aug 5, 2020
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
1 change: 0 additions & 1 deletion it-linux-base/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -54,4 +54,3 @@ module "it-linux-base" {
|------|-------------|
| this\_security\_group\_arn | Created security group ARN |
| this\_security\_group\_id | Created security group ID |

2 changes: 1 addition & 1 deletion it-linux-base/main.tf
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -112,9 +112,9 @@ resource "aws_security_group" "this_security_group" {
}

tags = merge(
map("Name", "sg-${local.name}"),
var.tags,
map("boc:tf_module_version", var._module_version),
map("boc:vpc:info", join(" ", compact(list(var.vpc_id, var.vpc_full_name)))),
map("Name", "sg-${local.name}"),
)
}
36 changes: 18 additions & 18 deletions it-linux-base/ports.tf
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12,27 +12,27 @@ locals {
n_mgmt = ["148.129.162.0/24", "148.129.95.0/24"]
source_groups = ["all", "external"]
name = var.name
ports = [
[ -1, -1, "icmp", "ICMP", local.n_all, ["external"] ],
[ 22, 22, "tcp", "SSH", local.n_census, ["external"] ],
[ 25, 25, "tcp", "SMTP", local.n_all, ["external"] ],
[ 123, 123, "udp", "NTP", local.n_all, ["external"] ],
[ 161, 161, "udp", "SNMP", local.n_all, ["external"] ],
[ 443, 443, "tcp", "https", local.n_all, ["external"] ],
[ 4949, 4949, "tcp", "Munin", local.n_mgmt, ["external"] ],
[ 5001, 5003, "tcp", "iperf", local.n_all, ["external"] ],
[ 5001, 5003, "udp", "iperf", local.n_all, ["external"] ],
ports = [
[-1, -1, "icmp", "ICMP", local.n_all, ["external"]],
[22, 22, "tcp", "SSH", local.n_census, ["external"]],
[25, 25, "tcp", "SMTP", local.n_all, ["external"]],
[123, 123, "udp", "NTP", local.n_all, ["external"]],
[161, 161, "udp", "SNMP", local.n_all, ["external"]],
[443, 443, "tcp", "https", local.n_all, ["external"]],
[4949, 4949, "tcp", "Munin", local.n_mgmt, ["external"]],
[5001, 5003, "tcp", "iperf", local.n_all, ["external"]],
[5001, 5003, "udp", "iperf", local.n_all, ["external"]],

[ 1556, 1556, "tcp", "Netbackup", local.n_all, ["external"] ],
[ 13724, 13724, "tcp", "Netbackup", local.n_all, ["external"] ],
[ 13782, 13782, "tcp", "Netbackup", local.n_all, ["external"] ],
[1556, 1556, "tcp", "Netbackup", local.n_all, ["external"]],
[13724, 13724, "tcp", "Netbackup", local.n_all, ["external"]],
[13782, 13782, "tcp", "Netbackup", local.n_all, ["external"]],

[ 1830, 1830, "tcp", "Oracle-OEM", ["10.193.8.0/23" ], ["external"]],
[1830, 1830, "tcp", "Oracle-OEM", ["10.193.8.0/23"], ["external"]],

[ 1002, 1002, "tcp", "OPSware-Control", local.n_all, ["external"] ],
[ 9080, 9080, "tcp", "", [local.n_census[2] ], ["external"]],
[ 10082, 10082, "tcp", "Netbackup-spoold", local.n_all, ["external"] ],
[ 10102, 10102, "tcp", "Netbackup-spad", local.n_all, ["external"] ],
[1002, 1002, "tcp", "OPSware-Control", local.n_all, ["external"]],
[9080, 9080, "tcp", "", [local.n_census[2]], ["external"]],
[10082, 10082, "tcp", "Netbackup-spoold", local.n_all, ["external"]],
[10102, 10102, "tcp", "Netbackup-spad", local.n_all, ["external"]],
]

# these are ignored
Expand Down