Skip to content

0.4.8

Choose a tag to compare

@aknysh aknysh released this 19 Sep 13:45

what

Add the possibility to use existing security groups when creating load balancer, and stop the creation of the default security group.

why

The default behavior when creating a load balancer is to create a security group which allow 0.0.0.0 to access to it. Sometimes we need to allow only a specific CIDR.

There are two variables :

  • loadbalancer_security_groups : list of security groups to attach
  • loadbalancer_managed_security_group : A single SG. If you don't fill this variable, it will continue to create a default security group.

Example : Use a custom SG which allow only my network :

  loadbalancer_security_groups = ["${module.sg.this_security_group_id}"]
  loadbalancer_managed_security_group = "${module.sg.this_security_group_id}"

If you don't fill theses two variables, you have the classical workflow.

references