Merge pull request #15614 from hakman/gce_bastion_ssh_rules

gce: Rename firewall SSH rules for bastion
kubernetes · Jul 10, 2023 · 4b79e04 · 4b79e04
2 parents 4ad116e + 53e4588
commit 4b79e04
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/pkg/model/gcemodel/external_access.go b/pkg/model/gcemodel/external_access.go
@@ -62,14 +62,14 @@ func (b *ExternalAccessModelBuilder) Build(c *fi.CloudupModelBuilderContext) err
 			SourceRanges: b.Cluster.Spec.SSHAccess,
 			Network:      network,
 		})
-		b.AddFirewallRulesTasks(c, "bastion-to-master", &gcetasks.FirewallRule{
+		b.AddFirewallRulesTasks(c, "bastion-to-master-ssh", &gcetasks.FirewallRule{
 			Lifecycle:  b.Lifecycle,
 			TargetTags: []string{b.GCETagForRole(kops.InstanceGroupRoleControlPlane), b.GCETagForRole("Master")},
 			Allowed:    []string{"tcp:22"},
 			SourceTags: []string{b.GCETagForRole(kops.InstanceGroupRoleBastion)},
 			Network:    network,
 		})
-		b.AddFirewallRulesTasks(c, "bastion-to-node", &gcetasks.FirewallRule{
+		b.AddFirewallRulesTasks(c, "bastion-to-node-ssh", &gcetasks.FirewallRule{
 			Lifecycle:  b.Lifecycle,
 			TargetTags: []string{b.GCETagForRole(kops.InstanceGroupRoleNode)},
 			Allowed:    []string{"tcp:22"},