CadolesKube/typhoon
7
0
Fork 0
mirror of https://github.com/puppetmaster/typhoon.git synced 2025-07-21 18:01:32 +02:00
Code Issues Packages Projects Releases Wiki Activity

Fix race condition creating DigitalOcean firewall rules

Browse Source 
* DigitalOcean firewall rules should reference Terraform tag
resources rather than using tag strings. Otherwise, terraform
apply can fail (neeeds rerun) if a tag has not yet been created
This commit is contained in:
Dalton Hubble
2020-04-19 16:44:26 -07:00
parent feac94605a
commit fcbee12334
3 changed files with 21 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
digital-ocean/container-linux/kubernetes/network.tf
View File

@ -1,7 +1,10 @@
resource "digitalocean_firewall" "rules" {
name = var.cluster_name
tags = ["${var.cluster_name}-controller", "${var.cluster_name}-worker"]
tags = [
digitalocean_tag.controllers.name,
digitalocean_tag.workers.name
]
# allow ssh, internal flannel, internal node-exporter, internal kubelet
inbound_rule {
@ -59,7 +62,7 @@ resource "digitalocean_firewall" "rules" {
resource "digitalocean_firewall" "controllers" {
name = "${var.cluster_name}-controllers"
tags = ["${var.cluster_name}-controller"]
tags = [digitalocean_tag.controllers.name]
# etcd
inbound_rule {
@ -93,7 +96,7 @@ resource "digitalocean_firewall" "controllers" {
resource "digitalocean_firewall" "workers" {
name = "${var.cluster_name}-workers"
tags = ["${var.cluster_name}-worker"]
tags = [digitalocean_tag.workers.name]
# allow HTTP/HTTPS ingress
inbound_rule {