From 5ebcbfb3c51948d52c89d88009339c86f65de4c2 Mon Sep 17 00:00:00 2001 From: Michael Friis Date: Sat, 15 Oct 2016 09:24:41 -0700 Subject: [PATCH 1/3] don't open port 22 and 80 on worker nodes to the world --- aws/cloudformation/docker_for_aws.json | 6 +----- 1 file changed, 1 insertion(+), 5 deletions(-) diff --git a/aws/cloudformation/docker_for_aws.json b/aws/cloudformation/docker_for_aws.json index c2c09d533..12ca3c1c2 100644 --- a/aws/cloudformation/docker_for_aws.json +++ b/aws/cloudformation/docker_for_aws.json @@ -424,11 +424,7 @@ "VpcId": { "Ref": "Vpc" }, - "GroupDescription": "Node SecurityGroup", - "SecurityGroupIngress": [ - {"IpProtocol": "tcp","FromPort": "22","ToPort": "22","CidrIp": "0.0.0.0/0"}, - {"IpProtocol": "tcp","FromPort": "80","ToPort": "80","CidrIp": "0.0.0.0/0"} - ] + "GroupDescription": "Node SecurityGroup" } }, From 27ccae73cbd80b51e3dc0d5b6591e8d4b0ff12a7 Mon Sep 17 00:00:00 2001 From: Michael Friis Date: Mon, 17 Oct 2016 13:02:51 -0700 Subject: [PATCH 2/3] close 22 and 80 in cloud template --- aws/cloudformation/docker_for_aws_cloud.json | 6 +----- 1 file changed, 1 insertion(+), 5 deletions(-) diff --git a/aws/cloudformation/docker_for_aws_cloud.json b/aws/cloudformation/docker_for_aws_cloud.json index e7d83292c..d3ce2f4e2 100644 --- a/aws/cloudformation/docker_for_aws_cloud.json +++ b/aws/cloudformation/docker_for_aws_cloud.json @@ -446,11 +446,7 @@ "VpcId": { "Ref": "Vpc" }, - "GroupDescription": "Node SecurityGroup", - "SecurityGroupIngress": [ - {"IpProtocol": "tcp","FromPort": "22","ToPort": "22","CidrIp": "0.0.0.0/0"}, - {"IpProtocol": "tcp","FromPort": "80","ToPort": "80","CidrIp": "0.0.0.0/0"} - ] + "GroupDescription": "Node SecurityGroup" } }, From 7bd4f063e678c7bba4f30c18ca98c64afe0cd03c Mon Sep 17 00:00:00 2001 From: Michael Friis Date: Mon, 17 Oct 2016 13:03:23 -0700 Subject: [PATCH 3/3] close 22 and 80 in ddc template --- aws/cloudformation/docker_for_aws_ddc.json | 6 +----- 1 file changed, 1 insertion(+), 5 deletions(-) diff --git a/aws/cloudformation/docker_for_aws_ddc.json b/aws/cloudformation/docker_for_aws_ddc.json index 3e540553c..b7b7a4e95 100644 --- a/aws/cloudformation/docker_for_aws_ddc.json +++ b/aws/cloudformation/docker_for_aws_ddc.json @@ -443,11 +443,7 @@ "VpcId": { "Ref": "Vpc" }, - "GroupDescription": "Node SecurityGroup", - "SecurityGroupIngress": [ - {"IpProtocol": "tcp","FromPort": "22","ToPort": "22","CidrIp": "0.0.0.0/0"}, - {"IpProtocol": "tcp","FromPort": "80","ToPort": "80","CidrIp": "0.0.0.0/0"} - ] + "GroupDescription": "Node SecurityGroup" } },