Merge pull request #13098 from hashicorp/fix-insecure-load-test

fix insecure cidr_blocks in load test
This commit is contained in:
cskh 2022-05-16 17:08:48 -04:00 committed by GitHub
commit bac9cfc99c
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 7 additions and 7 deletions

View File

@ -37,9 +37,9 @@ module "consul_servers" {
vpc_id = module.vpc.vpc_id
subnet_ids = module.vpc.public_subnets
allowed_ssh_cidr_blocks = ["0.0.0.0/0"]
allowed_ssh_cidr_blocks = [var.vpc_cidr]
allowed_inbound_cidr_blocks = ["0.0.0.0/0"]
allowed_inbound_cidr_blocks = [var.vpc_cidr]
ssh_key_name = module.keys.key_name
}
@ -57,9 +57,9 @@ module "consul_clients" {
vpc_id = module.vpc.vpc_id
subnet_ids = module.vpc.public_subnets
allowed_ssh_cidr_blocks = ["0.0.0.0/0"]
allowed_ssh_cidr_blocks = [var.vpc_cidr]
allowed_inbound_cidr_blocks = ["0.0.0.0/0"]
allowed_inbound_cidr_blocks = [var.vpc_cidr]
ssh_key_name = module.keys.key_name
}

View File

@ -31,19 +31,19 @@ resource "aws_security_group" "test-servers" {
to_port = 8500
security_groups = [module.consul_clients.security_group_id]
protocol = "6"
cidr_blocks = ["0.0.0.0/0"]
cidr_blocks = [var.vpc_cidr]
}
ingress {
from_port = 22
to_port = 22
protocol = "6"
cidr_blocks = ["0.0.0.0/0"]
cidr_blocks = [var.vpc_cidr]
}
egress {
from_port = 0
to_port = 0
protocol = "-1"
cidr_blocks = ["0.0.0.0/0"]
cidr_blocks = [var.vpc_cidr]
}
}