From 14ecff22c7f9e5a65293055710ca8b7082408fc3 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Rados=C5=82aw=20Piliszek?= <rpiliszek@7bulls.com>
Date: Sat, 23 Jul 2022 14:16:39 +0200
Subject: [PATCH] Use the right security groups
---
terraform/main.tf | 11 ++++-------
1 file changed, 4 insertions(+), 7 deletions(-)
diff --git a/terraform/main.tf b/terraform/main.tf
index f7f23f9..2ff2ac9 100644
--- a/terraform/main.tf
+++ b/terraform/main.tf
@@ -18,10 +18,6 @@ data "openstack_networking_network_v2" "external" {
name = "external"
}
-data "openstack_networking_secgroup_v2" "default" {
- name = "default"
-}
-
# Create virtual machine
resource "openstack_compute_instance_v2" "nginx" {
name = "nginx-host"
@@ -71,7 +67,8 @@ resource "openstack_networking_port_v2" "nginx" {
network_id = openstack_networking_network_v2.generic.id
admin_state_up = true
security_group_ids = [
- data.openstack_networking_secgroup_v2.default.id #default flavour id
+ resource.openstack_networking_secgroup_v2.ssh.id,
+ resource.openstack_networking_secgroup_v2.http.id,
]
fixed_ip {
subnet_id = openstack_networking_subnet_v2.nginx.id
@@ -89,7 +86,7 @@ resource "openstack_networking_router_interface_v2" "nginx" {
subnet_id = openstack_networking_subnet_v2.nginx.id
}
-resource "openstack_compute_secgroup_v2" "http" {
+resource "openstack_networking_secgroup_v2" "http" {
name = "http"
description = "Open input http port"
rule {
@@ -100,7 +97,7 @@ resource "openstack_compute_secgroup_v2" "http" {
}
}
-resource "openstack_compute_secgroup_v2" "ssh" {
+resource "openstack_networking_secgroup_v2" "ssh" {
name = "ssh"
description = "Open input ssh port"
rule {
--
GitLab