Make nft rules dynamic in connector class, SC-2670

2025-02-26 16:02:03 +01:00 · 2025-02-26 16:02:03 +01:00 · 746ef65cb9
commit 746ef65cb9
parent c102fe775b
1 changed files with 2 additions and 1 deletions
--- a/global/overlay/etc/puppet/modules/eid/manifests/connector.pp
+++ b/global/overlay/etc/puppet/modules/eid/manifests/connector.pp
@ -22,8 +22,9 @@ class eid::connector (
  if $version {

    # Allow HTTPS from load balancer servers
+    $lb_ips = hiera_array("lb_${environment}_servers",[])
    sunet::nftables::allow { 'allow-https-from-lbs':
-      from => ['94.176.224.38', '94.176.224.166',],
+      from => $lb_ips,
      port => 443,
    }