Skip to content

Commit

Permalink
update missing flag
Browse files Browse the repository at this point in the history
  • Loading branch information
ericyz committed Nov 11, 2020
1 parent 327827c commit 217bf8d
Show file tree
Hide file tree
Showing 7 changed files with 22 additions and 0 deletions.
4 changes: 4 additions & 0 deletions firewall.tf
Original file line number Diff line number Diff line change
Expand Up @@ -83,6 +83,7 @@ resource "google_compute_firewall" "master_webhooks" {

}


/******************************************
Create shadow firewall rules to capture the
traffic flow between the managed firewall rules
Expand Down Expand Up @@ -115,6 +116,7 @@ resource "google_compute_firewall" "shadow_allow_pods" {

resource "google_compute_firewall" "shadow_allow_master" {
count = var.add_shadow_firewall_rules ? 1 : 0

name = "gke-shadow-${substr(var.name, 0, min(25, length(var.name)))}-master"
description = "Managed by terraform gke module: A shadow firewall rule to match the fireall allow master and woker nodes communication."
project = local.network_project_id
Expand All @@ -135,6 +137,8 @@ resource "google_compute_firewall" "shadow_allow_master" {
}

resource "google_compute_firewall" "shadow_allow_nodes" {
count = var.add_shadow_firewall_rules ? 1 : 0

name = "gke-shadow-${substr(var.name, 0, min(25, length(var.name)))}-vms"
description = "Managed by terraform gke module: A shadow firewall rule to match the fireall allow woker nodes communication."
project = local.network_project_id
Expand Down
3 changes: 3 additions & 0 deletions modules/beta-private-cluster-update-variant/firewall.tf
Original file line number Diff line number Diff line change
Expand Up @@ -110,6 +110,7 @@ resource "google_compute_firewall" "shadow_allow_pods" {

resource "google_compute_firewall" "shadow_allow_master" {
count = var.add_shadow_firewall_rules ? 1 : 0

name = "gke-shadow-${substr(var.name, 0, min(25, length(var.name)))}-master"
description = "Managed by terraform gke module: A shadow firewall rule to match the fireall allow master and woker nodes communication."
project = local.network_project_id
Expand All @@ -130,6 +131,8 @@ resource "google_compute_firewall" "shadow_allow_master" {
}

resource "google_compute_firewall" "shadow_allow_nodes" {
count = var.add_shadow_firewall_rules ? 1 : 0

name = "gke-shadow-${substr(var.name, 0, min(25, length(var.name)))}-vms"
description = "Managed by terraform gke module: A shadow firewall rule to match the fireall allow woker nodes communication."
project = local.network_project_id
Expand Down
3 changes: 3 additions & 0 deletions modules/beta-private-cluster/firewall.tf
Original file line number Diff line number Diff line change
Expand Up @@ -110,6 +110,7 @@ resource "google_compute_firewall" "shadow_allow_pods" {

resource "google_compute_firewall" "shadow_allow_master" {
count = var.add_shadow_firewall_rules ? 1 : 0

name = "gke-shadow-${substr(var.name, 0, min(25, length(var.name)))}-master"
description = "Managed by terraform gke module: A shadow firewall rule to match the fireall allow master and woker nodes communication."
project = local.network_project_id
Expand All @@ -130,6 +131,8 @@ resource "google_compute_firewall" "shadow_allow_master" {
}

resource "google_compute_firewall" "shadow_allow_nodes" {
count = var.add_shadow_firewall_rules ? 1 : 0

name = "gke-shadow-${substr(var.name, 0, min(25, length(var.name)))}-vms"
description = "Managed by terraform gke module: A shadow firewall rule to match the fireall allow woker nodes communication."
project = local.network_project_id
Expand Down
3 changes: 3 additions & 0 deletions modules/beta-public-cluster-update-variant/firewall.tf
Original file line number Diff line number Diff line change
Expand Up @@ -116,6 +116,7 @@ resource "google_compute_firewall" "shadow_allow_pods" {

resource "google_compute_firewall" "shadow_allow_master" {
count = var.add_shadow_firewall_rules ? 1 : 0

name = "gke-shadow-${substr(var.name, 0, min(25, length(var.name)))}-master"
description = "Managed by terraform gke module: A shadow firewall rule to match the fireall allow master and woker nodes communication."
project = local.network_project_id
Expand All @@ -136,6 +137,8 @@ resource "google_compute_firewall" "shadow_allow_master" {
}

resource "google_compute_firewall" "shadow_allow_nodes" {
count = var.add_shadow_firewall_rules ? 1 : 0

name = "gke-shadow-${substr(var.name, 0, min(25, length(var.name)))}-vms"
description = "Managed by terraform gke module: A shadow firewall rule to match the fireall allow woker nodes communication."
project = local.network_project_id
Expand Down
3 changes: 3 additions & 0 deletions modules/beta-public-cluster/firewall.tf
Original file line number Diff line number Diff line change
Expand Up @@ -116,6 +116,7 @@ resource "google_compute_firewall" "shadow_allow_pods" {

resource "google_compute_firewall" "shadow_allow_master" {
count = var.add_shadow_firewall_rules ? 1 : 0

name = "gke-shadow-${substr(var.name, 0, min(25, length(var.name)))}-master"
description = "Managed by terraform gke module: A shadow firewall rule to match the fireall allow master and woker nodes communication."
project = local.network_project_id
Expand All @@ -136,6 +137,8 @@ resource "google_compute_firewall" "shadow_allow_master" {
}

resource "google_compute_firewall" "shadow_allow_nodes" {
count = var.add_shadow_firewall_rules ? 1 : 0

name = "gke-shadow-${substr(var.name, 0, min(25, length(var.name)))}-vms"
description = "Managed by terraform gke module: A shadow firewall rule to match the fireall allow woker nodes communication."
project = local.network_project_id
Expand Down
3 changes: 3 additions & 0 deletions modules/private-cluster-update-variant/firewall.tf
Original file line number Diff line number Diff line change
Expand Up @@ -110,6 +110,7 @@ resource "google_compute_firewall" "shadow_allow_pods" {

resource "google_compute_firewall" "shadow_allow_master" {
count = var.add_shadow_firewall_rules ? 1 : 0

name = "gke-shadow-${substr(var.name, 0, min(25, length(var.name)))}-master"
description = "Managed by terraform gke module: A shadow firewall rule to match the fireall allow master and woker nodes communication."
project = local.network_project_id
Expand All @@ -130,6 +131,8 @@ resource "google_compute_firewall" "shadow_allow_master" {
}

resource "google_compute_firewall" "shadow_allow_nodes" {
count = var.add_shadow_firewall_rules ? 1 : 0

name = "gke-shadow-${substr(var.name, 0, min(25, length(var.name)))}-vms"
description = "Managed by terraform gke module: A shadow firewall rule to match the fireall allow woker nodes communication."
project = local.network_project_id
Expand Down
3 changes: 3 additions & 0 deletions modules/private-cluster/firewall.tf
Original file line number Diff line number Diff line change
Expand Up @@ -110,6 +110,7 @@ resource "google_compute_firewall" "shadow_allow_pods" {

resource "google_compute_firewall" "shadow_allow_master" {
count = var.add_shadow_firewall_rules ? 1 : 0

name = "gke-shadow-${substr(var.name, 0, min(25, length(var.name)))}-master"
description = "Managed by terraform gke module: A shadow firewall rule to match the fireall allow master and woker nodes communication."
project = local.network_project_id
Expand All @@ -130,6 +131,8 @@ resource "google_compute_firewall" "shadow_allow_master" {
}

resource "google_compute_firewall" "shadow_allow_nodes" {
count = var.add_shadow_firewall_rules ? 1 : 0

name = "gke-shadow-${substr(var.name, 0, min(25, length(var.name)))}-vms"
description = "Managed by terraform gke module: A shadow firewall rule to match the fireall allow woker nodes communication."
project = local.network_project_id
Expand Down

0 comments on commit 217bf8d

Please sign in to comment.