data: add etcd metrics port to ingress rules.

Signed-off-by: Sam Batschelet <sbatsche@redhat.com>
openshift · Mar 1, 2019 · 6c5b6dd · 6c5b6dd
1 parent d9c647a
commit 6c5b6dd
Show file tree

Hide file tree

Showing 2 changed files with 19 additions and 0 deletions.
diff --git a/data/data/aws/vpc/sg-master.tf b/data/data/aws/vpc/sg-master.tf
@@ -216,6 +216,16 @@ resource "aws_security_group_rule" "master_ingress_etcd" {
   self      = true
 }
 
+resource "aws_security_group_rule" "master_ingress_etcd_metrics" {
+  type              = "ingress"
+  security_group_id = "${aws_security_group.master.id}"
+
+  protocol  = "tcp"
+  from_port = 23790
+  to_port   = 23790
+  self      = true
+}
+
 resource "aws_security_group_rule" "master_ingress_bootstrap_etcd" {
   type              = "ingress"
   security_group_id = "${aws_security_group.master.id}"

diff --git a/data/data/openstack/topology/sg-master.tf b/data/data/openstack/topology/sg-master.tf
@@ -195,6 +195,15 @@ resource "openstack_networking_secgroup_rule_v2" "master_ingress_etcd" {
   security_group_id = "${openstack_networking_secgroup_v2.master.id}"
 }
 
+resource "openstack_networking_secgroup_rule_v2" "master_ingress_etcd_metrics" {
+  direction         = "ingress"
+  ethertype         = "IPv4"
+  protocol          = "tcp"
+  port_range_min    = 23790
+  port_range_max    = 23790
+  security_group_id = "${openstack_networking_secgroup_v2.master.id}"
+}
+
 resource "openstack_networking_secgroup_rule_v2" "master_ingress_bootstrap_etcd" {
   direction         = "ingress"
   ethertype         = "IPv4"