Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: added node security group additional rule to allow all traffic i… #359

Merged
merged 4 commits into from
Dec 16, 2024
Merged

fix: added node security group additional rule to allow all traffic i… #359

Show file tree
Hide file tree
Changes from 2 commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
f56eb5a
fix: added node security group additional rule to allow all traffic i…
kvvit Nov 25, 2024
33dadd0
fix: added depends on for external secrets and loki, update helm char…
kvvit Nov 25, 2024
4ba8d1c
fix: Removed unnecessary for this PR changes
kvvit Dec 11, 2024
7ce0cd9
fix: Removed unnecessary for this PR changes
kvvit Dec 11, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
11 changes: 11 additions & 0 deletions terraform/modules/aws-eks/main.tf
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -42,6 +42,17 @@ module "eks" {

node_security_group_tags = { "karpenter.sh/discovery" = var.name }

node_security_group_additional_rules = {
ingress_allow_all_traffic_inside = {
description = "Allow all traffic inside security group"
protocol = "all"
from_port = 0
to_port = 0
type = "ingress"
self = true
}
}

self_managed_node_group_defaults = {
ami_type = "AL2023_ARM_64_STANDARD"
block_device_mappings = {
Expand Down
1 change: 1 addition & 0 deletions terraform/modules/k8s-addons/eks-external-secrets.tf
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -154,4 +154,5 @@ resource "helm_release" "external_secrets" {
local.external_secrets_values
]

depends_on = [helm_release.aws_loadbalancer_controller]
mglotov marked this conversation as resolved.
Show resolved Hide resolved
}
5 changes: 4 additions & 1 deletion terraform/modules/k8s-addons/eks-loki-stack.tf
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -180,5 +180,8 @@ resource "helm_release" "loki_stack" {
local.loki_stack_values
]

depends_on = [kubectl_manifest.kube_prometheus_stack_operator_crds]
depends_on = [
kubectl_manifest.kube_prometheus_stack_operator_crds,
helm_release.aws_loadbalancer_controller
mglotov marked this conversation as resolved.
Show resolved Hide resolved
]
}
2 changes: 1 addition & 1 deletion terraform/modules/k8s-addons/helm-releases.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -39,7 +39,7 @@ releases:
enabled: true
chart: external-secrets
repository: https://charts.external-secrets.io
chart_version: 0.10.0
chart_version: 0.10.4
namespace: external-secrets
- id: gitlab-runner
enabled: false
Expand Down
Loading