You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@dlab.apache.org by om...@apache.org on 2019/11/04 12:04:14 UTC

[incubator-dlab] branch DLAB-1158 updated: added additional rule for project SG

This is an automated email from the ASF dual-hosted git repository.

omartushevskyi pushed a commit to branch DLAB-1158
in repository https://gitbox.apache.org/repos/asf/incubator-dlab.git


The following commit(s) were added to refs/heads/DLAB-1158 by this push:
     new ba3aa22  added additional rule for project SG
ba3aa22 is described below

commit ba3aa22b78737414f8880e4ddb764ae514f05f56
Author: Oleh Martushevskyi <Ol...@epam.com>
AuthorDate: Mon Nov 4 14:04:01 2019 +0200

    added additional rule for project SG
---
 .../src/general/scripts/aws/project_prepare.py                |  6 ++++++
 .../src/general/scripts/azure/project_prepare.py              | 11 +++++++++++
 .../src/general/scripts/gcp/project_prepare.py                |  2 +-
 3 files changed, 18 insertions(+), 1 deletion(-)

diff --git a/infrastructure-provisioning/src/general/scripts/aws/project_prepare.py b/infrastructure-provisioning/src/general/scripts/aws/project_prepare.py
index a5e8a79..ee53434 100644
--- a/infrastructure-provisioning/src/general/scripts/aws/project_prepare.py
+++ b/infrastructure-provisioning/src/general/scripts/aws/project_prepare.py
@@ -254,6 +254,12 @@ if __name__ == "__main__":
                 "ToPort": 80, "IpProtocol": "tcp", "UserIdGroupPairs": []
             },
             {
+                "PrefixListIds": [],
+                "FromPort": 443,
+                "IpRanges": project_conf['allowed_ip_cidr'],
+                "ToPort": 443, "IpProtocol": "tcp", "UserIdGroupPairs": []
+            },
+            {
                 "IpProtocol": "-1",
                 "IpRanges": [{"CidrIp": project_conf['provision_instance_ip']}],
                 "UserIdGroupPairs": [],
diff --git a/infrastructure-provisioning/src/general/scripts/azure/project_prepare.py b/infrastructure-provisioning/src/general/scripts/azure/project_prepare.py
index f2451f9..479402f 100644
--- a/infrastructure-provisioning/src/general/scripts/azure/project_prepare.py
+++ b/infrastructure-provisioning/src/general/scripts/azure/project_prepare.py
@@ -191,6 +191,17 @@ if __name__ == "__main__":
                 "direction": "Inbound"
             },
             {
+                "name": "in-5",
+                "protocol": "Tcp",
+                "source_port_range": "*",
+                "destination_port_range": "443",
+                "source_address_prefix": "*",
+                "destination_address_prefix": "*",
+                "access": "Allow",
+                "priority": 130,
+                "direction": "Inbound"
+            },
+            {
                 "name": "out-1",
                 "protocol": "Tcp",
                 "source_port_range": "*",
diff --git a/infrastructure-provisioning/src/general/scripts/gcp/project_prepare.py b/infrastructure-provisioning/src/general/scripts/gcp/project_prepare.py
index e8ee8c0..6711599 100644
--- a/infrastructure-provisioning/src/general/scripts/gcp/project_prepare.py
+++ b/infrastructure-provisioning/src/general/scripts/gcp/project_prepare.py
@@ -202,7 +202,7 @@ if __name__ == "__main__":
         rules = [
             {
                 'IPProtocol': 'tcp',
-                'ports': ['22', '80', '3128']
+                'ports': ['22', '80', '443', '3128']
             }
         ]
         ingress_rule['allowed'] = rules


---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@dlab.apache.org
For additional commands, e-mail: commits-help@dlab.apache.org