зеркало из https://github.com/Azure/acs-engine.git
Remove unreachable NSG code (#4164)
This commit is contained in:
Родитель
4ad1e7b8f2
Коммит
32d46a1206
|
@ -146,54 +146,7 @@
|
|||
"location": "[variables('location')]",
|
||||
"name": "[variables('nsgName')]",
|
||||
"properties": {
|
||||
"securityRules": [
|
||||
{{if .HasWindows}}
|
||||
{
|
||||
"name": "allow_rdp",
|
||||
"properties": {
|
||||
"access": "Allow",
|
||||
"description": "Allow RDP traffic to master",
|
||||
"destinationAddressPrefix": "*",
|
||||
"destinationPortRange": "3389-3389",
|
||||
"direction": "Inbound",
|
||||
"priority": 102,
|
||||
"protocol": "Tcp",
|
||||
"sourceAddressPrefix": "*",
|
||||
"sourcePortRange": "*"
|
||||
}
|
||||
},
|
||||
{{end}}
|
||||
{{if not IsHostedMaster}}
|
||||
{
|
||||
"name": "allow_ssh",
|
||||
"properties": {
|
||||
"access": "Allow",
|
||||
"description": "Allow SSH traffic to master",
|
||||
"destinationAddressPrefix": "*",
|
||||
"destinationPortRange": "22-22",
|
||||
"direction": "Inbound",
|
||||
"priority": 101,
|
||||
"protocol": "Tcp",
|
||||
"sourceAddressPrefix": "*",
|
||||
"sourcePortRange": "*"
|
||||
}
|
||||
},
|
||||
{
|
||||
"name": "allow_kube_tls",
|
||||
"properties": {
|
||||
"access": "Allow",
|
||||
"description": "Allow kube-apiserver (tls) traffic to master",
|
||||
"destinationAddressPrefix": "*",
|
||||
"destinationPortRange": "443-443",
|
||||
"direction": "Inbound",
|
||||
"priority": 100,
|
||||
"protocol": "Tcp",
|
||||
"sourceAddressPrefix": "*",
|
||||
"sourcePortRange": "*"
|
||||
}
|
||||
}
|
||||
{{end}}
|
||||
]
|
||||
"securityRules": []
|
||||
},
|
||||
"type": "Microsoft.Network/networkSecurityGroups"
|
||||
}
|
||||
|
|
Загрузка…
Ссылка в новой задаче