Add extra cluster sg rule

Signed-off-by: GitHub <noreply@github.com>
ministryofjustice · Jan 21, 2025 · 7663e0a · 7663e0a
1 parent 4631864
commit 7663e0a
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/terraform/environments/analytical-platform-compute/eks-cluster.tf b/terraform/environments/analytical-platform-compute/eks-cluster.tf
@@ -17,6 +17,16 @@ module "eks" {
   vpc_id                   = module.vpc.vpc_id
   control_plane_subnet_ids = module.vpc.intra_subnets
   subnet_ids               = module.vpc.private_subnets
+  cluster_security_group_additional_rules = {
+    vpc = {
+      description = "Allow traffic from the VPC"
+      from_port   = 0
+      to_port     = 65535
+      protocol    = "tcp"
+      type        = "ingress"
+      cidr_blocks = [module.vpc.vpc_cidr_block]
+    }
+  }
 
   authentication_mode                      = "API"
   enable_cluster_creator_admin_permissions = true