Fix limiting behavior of workers_ingress_cluster security group

* New variable `worker_sg_ingress_from_port` allows to change the minimum port number from which pods will accept communication
* See https://github.com/terraform-aws-modules/terraform-aws-eks/issues/27
This commit is contained in:
Ilya Sotkov
2018-06-22 11:52:37 +03:00
parent ee66e1df65
commit 02dc6849fb
5 changed files with 14 additions and 2 deletions

View File

@@ -104,6 +104,7 @@ MIT Licensed. See [LICENSE](https://github.com/terraform-aws-modules/terraform-a
| vpc_id | VPC where the cluster and workers will be deployed. | string | - | yes |
| worker_groups | A list of maps defining worker group configurations. See workers_group_defaults for valid keys. | list | `<list>` | no |
| worker_security_group_id | If provided, all workers will be attached to this security group. If not given, a security group will be created with necessary ingres/egress to work with the EKS cluster. | string | `` | no |
| worker_sg_ingress_from_port | Minimum port number from which pods will accept communication. Must be changed to a lower value if some pods in your cluster will expose a port lower than 1025 (e.g. 22, 80, or 443). | string | `1025` | no |
| workers_group_defaults | Default values for target groups as defined by the list of maps. | map | `<map>` | no |
## Outputs