tf-module-openstack-base/security_groups_head.tf at master · cyberrangecz/tf-module-openstack-base · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
resource "openstack_networking_secgroup_v2" "head" {
  name        = "base-head-sg"
  description = "Security Group for Head server"
}

resource "openstack_networking_secgroup_rule_v2" "remote_head_tcp" {
  direction         = "ingress"
  ethertype         = "IPv4"
  protocol          = "tcp"
  remote_group_id   = openstack_networking_secgroup_v2.head.id
  security_group_id = openstack_networking_secgroup_v2.head.id
}

resource "openstack_networking_secgroup_rule_v2" "remote_head_udp" {
  direction         = "ingress"
  ethertype         = "IPv4"
  protocol          = "udp"
  remote_group_id   = openstack_networking_secgroup_v2.head.id
  security_group_id = openstack_networking_secgroup_v2.head.id
}

resource "openstack_networking_secgroup_rule_v2" "head_ssh" {
  direction         = "ingress"
  ethertype         = "IPv4"
  protocol          = "tcp"
  port_range_min    = 22
  port_range_max    = 22
  remote_ip_prefix  = "0.0.0.0/0"
  security_group_id = openstack_networking_secgroup_v2.head.id
}

resource "openstack_networking_secgroup_rule_v2" "head_git_ssh" {
  direction         = "ingress"
  ethertype         = "IPv4"
  protocol          = "tcp"
  port_range_min    = 30022
  port_range_max    = 30022
  remote_ip_prefix  = "0.0.0.0/0"
  security_group_id = openstack_networking_secgroup_v2.head.id
}

resource "openstack_networking_secgroup_rule_v2" "head_http" {
  direction         = "ingress"
  ethertype         = "IPv4"
  protocol          = "tcp"
  port_range_min    = 80
  port_range_max    = 80
  remote_ip_prefix  = "0.0.0.0/0"
  security_group_id = openstack_networking_secgroup_v2.head.id
}

resource "openstack_networking_secgroup_rule_v2" "head_https" {
  direction         = "ingress"
  ethertype         = "IPv4"
  protocol          = "tcp"
  port_range_min    = 443
  port_range_max    = 443
  remote_ip_prefix  = "0.0.0.0/0"
  security_group_id = openstack_networking_secgroup_v2.head.id
}

resource "openstack_networking_secgroup_rule_v2" "head_6443" {
  direction         = "ingress"
  ethertype         = "IPv4"
  protocol          = "tcp"
  port_range_min    = 6443
  port_range_max    = 6443
  remote_ip_prefix  = "0.0.0.0/0"
  security_group_id = openstack_networking_secgroup_v2.head.id
}

resource "openstack_networking_secgroup_rule_v2" "head_8443" {
  direction         = "ingress"
  ethertype         = "IPv4"
  protocol          = "tcp"
  port_range_min    = 8443
  port_range_max    = 8443
  remote_ip_prefix  = "0.0.0.0/0"
  security_group_id = openstack_networking_secgroup_v2.head.id
}

resource "openstack_networking_secgroup_rule_v2" "head_syslog" {
  direction         = "ingress"
  ethertype         = "IPv4"
  protocol          = "tcp"
  port_range_min    = 515
  port_range_max    = 515
  remote_ip_prefix  = "0.0.0.0/0"
  security_group_id = openstack_networking_secgroup_v2.head.id
}

resource "openstack_networking_secgroup_rule_v2" "head_icmp" {
  direction         = "ingress"
  ethertype         = "IPv4"
  protocol          = "icmp"
  remote_ip_prefix  = "0.0.0.0/0"
  security_group_id = openstack_networking_secgroup_v2.head.id
}

resource "openstack_networking_secgroup_rule_v2" "remote_head_proxy_tcp" {
  direction         = "ingress"
  ethertype         = "IPv4"
  protocol          = "tcp"
  remote_group_id   = openstack_networking_secgroup_v2.proxy.id
  security_group_id = openstack_networking_secgroup_v2.head.id
}

resource "openstack_networking_secgroup_rule_v2" "remote_head_proxy_udp" {
  direction         = "ingress"
  ethertype         = "IPv4"
  protocol          = "udp"
  remote_group_id   = openstack_networking_secgroup_v2.proxy.id
  security_group_id = openstack_networking_secgroup_v2.head.id
}

resource "openstack_networking_secgroup_rule_v2" "remote_head_sandbox_access_tcp" {
  direction         = "ingress"
  ethertype         = "IPv4"
  protocol          = "tcp"
  remote_group_id   = openstack_networking_secgroup_v2.sandbox_access.id
  security_group_id = openstack_networking_secgroup_v2.head.id
}

resource "openstack_networking_secgroup_rule_v2" "remote_head_sandbox_access_udp" {
  direction         = "ingress"
  ethertype         = "IPv4"
  protocol          = "udp"
  remote_group_id   = openstack_networking_secgroup_v2.sandbox_access.id
  security_group_id = openstack_networking_secgroup_v2.head.id
}