add specific subnet for nodepool
This commit is contained in:
13
main.tf
13
main.tf
@@ -10,14 +10,15 @@ resource "hcloud_ssh_key" "k3s" {
|
||||
|
||||
resource "hcloud_network" "k3s" {
|
||||
name = "k3s"
|
||||
ip_range = "10.0.0.0/8"
|
||||
ip_range = var.network_ip_range
|
||||
}
|
||||
|
||||
resource "hcloud_network_subnet" "k3s" {
|
||||
resource "hcloud_network_subnet" "subnet" {
|
||||
for_each = var.network_subnets
|
||||
network_id = hcloud_network.k3s.id
|
||||
type = "cloud"
|
||||
network_zone = var.network_region
|
||||
ip_range = "10.0.0.0/16"
|
||||
ip_range = each.value
|
||||
}
|
||||
|
||||
resource "hcloud_firewall" "k3s" {
|
||||
@@ -29,8 +30,8 @@ resource "hcloud_firewall" "k3s" {
|
||||
protocol = "tcp"
|
||||
port = "any"
|
||||
source_ips = [
|
||||
var.network_ip_range,
|
||||
"127.0.0.1/32",
|
||||
"10.0.0.0/8",
|
||||
"169.254.169.254/32",
|
||||
"213.239.246.1/32"
|
||||
]
|
||||
@@ -40,8 +41,8 @@ resource "hcloud_firewall" "k3s" {
|
||||
protocol = "udp"
|
||||
port = "any"
|
||||
source_ips = [
|
||||
var.network_ip_range,
|
||||
"127.0.0.1/32",
|
||||
"10.0.0.0/8",
|
||||
"169.254.169.254/32",
|
||||
"213.239.246.1/32"
|
||||
]
|
||||
@@ -50,8 +51,8 @@ resource "hcloud_firewall" "k3s" {
|
||||
direction = "in"
|
||||
protocol = "icmp"
|
||||
source_ips = [
|
||||
var.network_ip_range,
|
||||
"127.0.0.1/32",
|
||||
"10.0.0.0/8",
|
||||
"169.254.169.254/32",
|
||||
"213.239.246.1/32"
|
||||
]
|
||||
|
Reference in New Issue
Block a user