Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat(ci.jenkins.io) allows SSH from private VPN and Jenkins access from internet #349

Merged

Conversation

dduportal
Copy link
Contributor

@dduportal dduportal commented May 16, 2023

Related to jenkins-infra/helpdesk#3535, this PR follows up #348

By default, all accesses are forbidden in the security group, so we cannot reach the VM.

This changes adds a set of security group rules to the ci.jenkins.io controller subnet to:

  • Allow incoming SSH requests from the private VPN (as public and private networks are peered) to the private IP of the VM
    • Nice to have once the access is validated: a private DNS record in the VPN subnet
  • Allow incoming HTTP, HTTPS and TCP Inbound protocols from the internet to the VM

…om internet

Signed-off-by: Damien Duportal <damien.duportal@gmail.com>
@dduportal dduportal changed the title feat(ci.jenkins.io) allows SSH from private VPN and Jenkins access fr… feat(ci.jenkins.io) allows SSH from private VPN and Jenkins access from internet May 16, 2023
ci.jenkins.io.tf Outdated Show resolved Hide resolved
Signed-off-by: Damien Duportal <damien.duportal@gmail.com>
@dduportal dduportal marked this pull request as ready for review May 16, 2023 08:05
@dduportal dduportal requested a review from a team May 16, 2023 08:05
Signed-off-by: Damien Duportal <damien.duportal@gmail.com>
@dduportal dduportal merged commit deb42f0 into jenkins-infra:main May 16, 2023
@dduportal dduportal deleted the feat/ci.jenkins.io/security-group-rules branch May 16, 2023 10:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants