guilherme.silva/iac-sei
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix major issues

Browse Source
This commit is contained in:
Guilherme Silva
2026-07-13 20:09:03 -03:00
parent 96cd0904d6
commit ee0afe7e79
16 changed files with 398 additions and 110 deletions
Download Patch File Download Diff File Expand all files Collapse all files

135
nsg-sei-servers-nsg.tf
View File

@@ -51,6 +51,51 @@ resource "oci_core_network_security_group_security_rule" "sei_servers_security_i
#--------------------------------------------------------------------------------------------------------------------------------------------
resource "oci_core_network_security_group_security_rule" "sei_servers_security_egress_rule_01" {
network_security_group_id = oci_core_network_security_group.sei-servers-nsg.id
description = "Egress to Internet port TCP/80"
destination = var.cidr_anywhere
destination_type = "CIDR_BLOCK"
direction = "EGRESS"
protocol = "6"
tcp_options {
destination_port_range {
max = 80
min = 80
}
}
}
resource "oci_core_network_security_group_security_rule" "sei_servers_security_egress_rule_02" {
network_security_group_id = oci_core_network_security_group.sei-servers-nsg.id
description = "Egress to OSN port TCP/443"
destination = lookup(data.oci_core_services.all_services.services[1], "cidr_block")
destination_type = "SERVICE_CIDR_BLOCK"
direction = "EGRESS"
protocol = "6"
tcp_options {
destination_port_range {
max = 443
min = 443
}
}
}
resource "oci_core_network_security_group_security_rule" "sei_servers_security_egress_rule_03" {
network_security_group_id = oci_core_network_security_group.sei-servers-nsg.id
description = "Egress to Internet port TCP/443"
destination = var.cidr_anywhere
destination_type = "CIDR_BLOCK"
direction = "EGRESS"
protocol = "6"
tcp_options {
destination_port_range {
max = 443
min = 443
}
}
}
resource "oci_core_network_security_group_security_rule" "sei_servers_security_egress_rule_04" {
network_security_group_id = oci_core_network_security_group.sei-servers-nsg.id
description = "Egress MySQL to sn-database"
destination = var.cidr_subnet_database
@@ -65,51 +110,6 @@ resource "oci_core_network_security_group_security_rule" "sei_servers_security_e
}
}
resource "oci_core_network_security_group_security_rule" "sei_servers_security_egress_rule_02" {
network_security_group_id = oci_core_network_security_group.sei-servers-nsg.id
description = "Egress MySQL Heatware to sn-database"
destination = var.cidr_subnet_database
destination_type = "CIDR_BLOCK"
direction = "EGRESS"
protocol = "6"
tcp_options {
destination_port_range {
max = 33060
min = 33060
}
}
}
resource "oci_core_network_security_group_security_rule" "sei_servers_security_egress_rule_03" {
network_security_group_id = oci_core_network_security_group.sei-servers-nsg.id
description = "Egress SOLR to sn-database"
destination = var.cidr_subnet_app
destination_type = "CIDR_BLOCK"
direction = "EGRESS"
protocol = "6"
tcp_options {
destination_port_range {
max = 8983
min = 8983
}
}
}
resource "oci_core_network_security_group_security_rule" "sei_servers_security_egress_rule_04" {
network_security_group_id = oci_core_network_security_group.sei-servers-nsg.id
description = "Egress Memcached to sn-app"
destination = var.cidr_subnet_app
destination_type = "CIDR_BLOCK"
direction = "EGRESS"
protocol = "6"
tcp_options {
destination_port_range {
max = 11211
min = 11211
}
}
}
resource "oci_core_network_security_group_security_rule" "sei_servers_security_egress_rule_05" {
network_security_group_id = oci_core_network_security_group.sei-servers-nsg.id
description = "Egress Jod to sn-app"
@@ -124,4 +124,49 @@ resource "oci_core_network_security_group_security_rule" "sei_servers_security_e
}
}
}
resource "oci_core_network_security_group_security_rule" "sei_servers_security_egress_rule_06" {
network_security_group_id = oci_core_network_security_group.sei-servers-nsg.id
description = "Egress SOLR to sn-database"
destination = var.cidr_subnet_app
destination_type = "CIDR_BLOCK"
direction = "EGRESS"
protocol = "6"
tcp_options {
destination_port_range {
max = 8983
min = 8983
}
}
}
resource "oci_core_network_security_group_security_rule" "sei_servers_security_egress_rule_07" {
network_security_group_id = oci_core_network_security_group.sei-servers-nsg.id
description = "Egress Memcached to sn-app"
destination = var.cidr_subnet_app
destination_type = "CIDR_BLOCK"
direction = "EGRESS"
protocol = "6"
tcp_options {
destination_port_range {
max = 11211
min = 11211
}
}
}
resource "oci_core_network_security_group_security_rule" "sei_servers_security_egress_rule_08" {
network_security_group_id = oci_core_network_security_group.sei-servers-nsg.id
description = "Egress MySQL Heatware to sn-database"
destination = var.cidr_subnet_database
destination_type = "CIDR_BLOCK"
direction = "EGRESS"
protocol = "6"
tcp_options {
destination_port_range {
max = 33060
min = 33060
}
}
}
#--------------------------------------------------------------------------------------------------------------------------------------------