aboutsummaryrefslogtreecommitdiff
path: root/terraform/aws
diff options
context:
space:
mode:
authorChristopher Baines <mail@cbaines.net>2018-07-05 11:42:08 +0100
committerChristopher Baines <mail@cbaines.net>2018-07-05 11:42:08 +0100
commit0b2df284100db9c03dcdc290f99091f199fb5eef (patch)
tree40671c319b62bc3e715bf5aa844a582d688e521f /terraform/aws
parentf6d74559eafa515bdef2afbf547b95a7ff751daf (diff)
downloadgovuk-mini-environment-admin-0b2df284100db9c03dcdc290f99091f199fb5eef.tar
govuk-mini-environment-admin-0b2df284100db9c03dcdc290f99091f199fb5eef.tar.gz
Improve the public ip address handling
Support multiple addresses to handle the GOV.UK PaaS, which has multiple egress points.
Diffstat (limited to 'terraform/aws')
-rw-r--r--terraform/aws/backend/main.tf8
1 files changed, 5 insertions, 3 deletions
diff --git a/terraform/aws/backend/main.tf b/terraform/aws/backend/main.tf
index fff5444..45d660f 100644
--- a/terraform/aws/backend/main.tf
+++ b/terraform/aws/backend/main.tf
@@ -66,8 +66,8 @@ variable "mini_environment_admin_guix_public_key" {
type = "string"
}
-variable "mini_environment_admin_public_ip_address" {
- type = "string"
+variable "mini_environment_admin_egress_cidr_blocks" {
+ type = "list"
}
variable "backend_slug" {
@@ -168,7 +168,9 @@ resource "aws_security_group" "ssh_access_from_mini_environment_admin" {
from_port = 0
to_port = 22
protocol = "tcp"
- cidr_blocks = ["${var.mini_environment_admin_public_ip_address}/32"]
+ cidr_blocks = [
+ "${var.mini_environment_admin_egress_cidr_blocks}"
+ ]
}
}