openstack-terraform: open nodeports SG (#1530)

Signed-off-by: Artiom Diomin <kron82@gmail.com>
kubermatic · Sep 22, 2021 · abac2b9 · abac2b9
1 parent edcb61d
commit abac2b9
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 2 deletions.
diff --git a/examples/terraform/openstack/main.tf b/examples/terraform/openstack/main.tf
@@ -81,6 +81,17 @@ resource "openstack_networking_secgroup_rule_v2" "secgroup_ssh" {
   security_group_id = openstack_networking_secgroup_v2.securitygroup.id
 }
 
+resource "openstack_networking_secgroup_rule_v2" "nodeports" {
+  description       = "Allow NodePorts"
+  direction         = "ingress"
+  ethertype         = "IPv4"
+  protocol          = "tcp"
+  port_range_min    = 30000
+  port_range_max    = 32767
+  remote_ip_prefix  = "0.0.0.0/0"
+  security_group_id = openstack_networking_secgroup_v2.securitygroup.id
+}
+
 resource "openstack_networking_secgroup_rule_v2" "secgroup_apiserver" {
   description       = "Allow kube-apiserver"
   direction         = "ingress"

diff --git a/examples/terraform/openstack/output.tf b/examples/terraform/openstack/output.tf
@@ -65,10 +65,11 @@ output "kubeone_workers" {
           securityGroups = [openstack_networking_secgroup_v2.securitygroup.name]
           network        = openstack_networking_network_v2.network.name
           subnet         = openstack_networking_subnet_v2.subnet.name
-          # Optional: If set, the rootDisk will be a volume. 
+          floatingIpPool = var.external_network_name
+          # Optional: If set, the rootDisk will be a volume.
           # Otherwise, the rootDisk will be on ephemeral storage and its size will
           # be derived from the flavor
-          rootDiskSizeGB = 50
+          # rootDiskSizeGB = 50
           # Optional: limit how many volumes can be attached to a node
           # nodeVolumeAttachLimit = 25
           tags = {