Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

✨ Manage Security Groups using OpenStackClusterTemplate #138

Merged
merged 3 commits into from
Jul 19, 2024
Merged

✨ Manage Security Groups using OpenStackClusterTemplate #138

Changes from 1 commit
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
b879680
Add security rules for Cilium
michal-gubricky Jul 11, 2024
d40cec8
Remove the patch for allowAllInClusterTraffic when security groups ar…
michal-gubricky Jul 19, 2024
7532726
Merge branch 'main' into feat/sec-groups
michal-gubricky Jul 19, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
32 changes: 31 additions & 1 deletion providers/openstack/scs/cluster-class/templates/openstack-cluster-template.yaml
View file
Open in desktop
chess-knight marked this conversation as resolved.
Show resolved Hide resolved
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,37 @@ spec:
allowedCIDRs: {{ .Values.restrict_kubeapi }}
{{- end }}
managedSecurityGroups:
allowAllInClusterTraffic: true
allNodesSecurityGroupRules:
- remoteManagedGroups:
- controlplane
- worker
direction: ingress
etherType: IPv4
name: VXLAN (Cilium)
portRangeMin: 8472
portRangeMax: 8472
protocol: udp
description: "Allow VXLAN traffic for Cilium"
- remoteManagedGroups:
- controlplane
- worker
direction: ingress
etherType: IPv4
name: HealthCheck (Cilium)
portRangeMin: 4240
portRangeMax: 4240
protocol: tcp
description: "Allow HealthCheck traffic for Cilium"
- remoteManagedGroups:
- controlplane
- worker
direction: ingress
etherType: IPv4
name: Hubble (Cilium)
portRangeMin: 4244
portRangeMax: 4244
protocol: tcp
description: "Allow Hubble traffic for Cilium"
managedSubnets:
- cidr: {{ .Values.node_cidr }}
dnsNameservers:
Expand Down