Fix limiting behavior of workers_ingress_cluster security group

* New variable `worker_sg_ingress_from_port` allows to change the minimum port number from which pods will accept communication
* See https://github.com/terraform-aws-modules/terraform-aws-eks/issues/27
This commit is contained in:
Ilya Sotkov
2018-06-22 11:52:37 +03:00
parent ee66e1df65
commit 02dc6849fb
5 changed files with 14 additions and 2 deletions

View File

@@ -73,7 +73,7 @@ resource "aws_security_group_rule" "workers_ingress_cluster" {
protocol = "tcp"
security_group_id = "${aws_security_group.workers.id}"
source_security_group_id = "${local.cluster_security_group_id}"
from_port = 1025
from_port = "${var.worker_sg_ingress_from_port}"
to_port = 65535
type = "ingress"
count = "${var.worker_security_group_id == "" ? 1 : 0}"