lb1: Update secret

IaC-test/securitygroups-lb.tf

@@ -12,7 +12,7 @@ resource "openstack_networking_secgroup_rule_v2" "lb_ingress_rule_v4_dco" {
   port_range_min    = "8443"
   port_range_max    = "8443"
   provider          = openstack.dco
-  remote_ip_prefix  = "87.251.31.153/32"
+  remote_ip_prefix  = "87.251.31.118/32"
   security_group_id = openstack_networking_secgroup_v2.lb-dco.id
 }
 
@@ -23,6 +23,41 @@ resource "openstack_networking_secgroup_rule_v2" "lb_ingress_rule2_v4_dco" {
   port_range_min    = "16443"
   port_range_max    = "16443"
   provider          = openstack.dco
-  remote_ip_prefix  = "87.251.31.153/32"
+  remote_ip_prefix  = "87.251.31.118/32"
+  security_group_id = openstack_networking_secgroup_v2.lb-dco.id
+}
+
+# From mgmt1
+
+resource "openstack_networking_secgroup_rule_v2" "lb_ingress_rule3_v4_dco" {
+  direction         = "ingress"
+  ethertype         = "IPv4"
+  protocol          = "tcp"
+  port_range_min    = "16443"
+  port_range_max    = "16443"
+  provider          = openstack.dco
+  remote_ip_prefix  = "89.47.191.66/32"
+  security_group_id = openstack_networking_secgroup_v2.lb-dco.id
+}
+
+resource "openstack_networking_secgroup_rule_v2" "lb_ingress_rule4_v4_dco" {
+  direction         = "ingress"
+  ethertype         = "IPv4"
+  protocol          = "tcp"
+  port_range_min    = "80"
+  port_range_max    = "80"
+  provider          = openstack.dco
+  remote_ip_prefix  = "89.47.191.66/32"
+  security_group_id = openstack_networking_secgroup_v2.lb-dco.id
+}
+
+resource "openstack_networking_secgroup_rule_v2" "lb_ingress_rule5_v4_dco" {
+  direction         = "ingress"
+  ethertype         = "IPv4"
+  protocol          = "tcp"
+  port_range_min    = "443"
+  port_range_max    = "443"
+  provider          = openstack.dco
+  remote_ip_prefix  = "89.47.191.66/32"
   security_group_id = openstack_networking_secgroup_v2.lb-dco.id
 }

global/overlay/etc/puppet/cosmos-rules.yaml

@@ -70,4 +70,4 @@
   matrix::podmanhost:
     rootless: true
     rlusers:
-      - 'matrixinstaller'
+      - matrixinstaller

lb1.matrix.test.sunet.se/overlay/etc/hiera/data/local.eyaml

@@ -1,3 +1,3 @@
 ---
 sourceips:
-  - ENC[PKCS7,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]
+  - ENC[PKCS7,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]