VPC security changes

bitovi · Dec 20, 2023 · 2c469cd · 2c469cd
1 parent a01ce97
commit 2c469cd
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 6 deletions.
diff --git a/operations/deployment/terraform/modules/aws/eks/aws_eks_security_group.tf b/operations/deployment/terraform/modules/aws/eks/aws_eks_security_group.tf
@@ -79,8 +79,8 @@ resource "aws_security_group_rule" "rule5" {
   from_port                = 53
   to_port                  = 53
   protocol                 = "tcp"
-  source_security_group_id = aws_security_group.eks_security_group_worker.id
-  security_group_id        = aws_security_group.eks_security_group_master.id
+  source_security_group_id = aws_security_group.eks_security_group_master.id
+  security_group_id        = aws_security_group.eks_security_group_worker.id
 }
 
 resource "aws_security_group_rule" "rule6" {
@@ -89,8 +89,8 @@ resource "aws_security_group_rule" "rule6" {
   from_port                = 53
   to_port                  = 53
   protocol                 = "udp"
-  source_security_group_id = aws_security_group.eks_security_group_worker.id
-  security_group_id        = aws_security_group.eks_security_group_master.id
+  source_security_group_id = aws_security_group.eks_security_group_master.id
+  security_group_id        = aws_security_group.eks_security_group_worker.id
 }
 
 resource "aws_security_group_rule" "rule7" {

diff --git a/operations/deployment/terraform/modules/aws/vpc/aws_vpc.tf b/operations/deployment/terraform/modules/aws/vpc/aws_vpc.tf
@@ -60,8 +60,7 @@ resource "aws_subnet" "public" {
   vpc_id                  = aws_vpc.main[0].id
   cidr_block              = element(local.aws_vpc_public_subnets, count.index)
   availability_zone       = element(local.aws_vpc_availability_zones, count.index)
-#  map_public_ip_on_launch = true
-  map_public_ip_on_launch = false # EKS-DEBUG
+  map_public_ip_on_launch = true
 
   tags = merge({
     Name = "${var.aws_resource_identifier}-public${count.index + 1}"