Skip to content

Commit e56ada2

Browse files
fix: allow outbound HTTP/HTTPS & DNS for Quickstart DA (#1034)
* fix: allow outbound HTTP/HTTPS & DNS for Quickstart DA * fix * bump cda * SKIP UPGRADE TEST * debug * debug * fix * fix
1 parent f440e6a commit e56ada2

1 file changed

Lines changed: 77 additions & 10 deletions

File tree

solutions/quickstart/main.tf

Lines changed: 77 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -68,27 +68,67 @@ module "vpc" {
6868
action = "allow"
6969
direction = "inbound"
7070
tcp = {
71-
port_min = 22
72-
port_max = 22
73-
source_port_min = 1024
74-
source_port_max = 65535
71+
port_min = 22
72+
port_max = 22
7573
}
7674
destination = "0.0.0.0/0"
7775
source = "0.0.0.0/0"
7876
},
7977
{
80-
name = "allow-ephemeral-outbound"
78+
name = "allow-all-22-inbound-response"
8179
action = "allow"
8280
direction = "outbound"
8381
tcp = {
84-
source_port_min = 1
85-
source_port_max = 65535
86-
port_min = 1024
87-
port_max = 65535
82+
source_port_min = 22
83+
source_port_max = 22
8884
}
8985
destination = "0.0.0.0/0"
9086
source = "0.0.0.0/0"
91-
}
87+
},
88+
{
89+
name = "allow-https-outbound"
90+
action = "allow"
91+
direction = "outbound"
92+
tcp = {
93+
port_min = 443
94+
port_max = 443
95+
}
96+
destination = "0.0.0.0/0"
97+
source = "0.0.0.0/0"
98+
},
99+
{
100+
name = "allow-https-outbound-response"
101+
action = "allow"
102+
direction = "inbound"
103+
tcp = {
104+
source_port_min = 443
105+
source_port_max = 443
106+
}
107+
destination = "0.0.0.0/0"
108+
source = "0.0.0.0/0"
109+
},
110+
{
111+
name = "allow-http-outbound"
112+
action = "allow"
113+
direction = "outbound"
114+
tcp = {
115+
port_min = 80
116+
port_max = 80
117+
}
118+
destination = "0.0.0.0/0"
119+
source = "0.0.0.0/0"
120+
},
121+
{
122+
name = "allow-http-outbound-response"
123+
action = "allow"
124+
direction = "inbound"
125+
tcp = {
126+
source_port_min = 80
127+
source_port_max = 80
128+
}
129+
destination = "0.0.0.0/0"
130+
source = "0.0.0.0/0"
131+
},
92132
]
93133
}
94134
]
@@ -161,6 +201,33 @@ module "vsi" {
161201
port_min = 22
162202
port_max = 22
163203
}
204+
},
205+
{
206+
name = "allow-http-outbound"
207+
direction = "outbound"
208+
source = "0.0.0.0/0"
209+
tcp = {
210+
port_min = 80
211+
port_max = 80
212+
}
213+
},
214+
{
215+
name = "allow-https-outbound"
216+
direction = "outbound"
217+
source = "0.0.0.0/0"
218+
tcp = {
219+
port_min = 443
220+
port_max = 443
221+
}
222+
},
223+
{
224+
name = "allow-dns-udp-outbound"
225+
direction = "outbound"
226+
source = "0.0.0.0/0"
227+
udp = {
228+
port_min = 53
229+
port_max = 53
230+
}
164231
}
165232
]
166233
}

0 commit comments

Comments
 (0)