Fix inbound rule to allow only 6443 port

Signed-off-by: Prajyot-Parab <[email protected]>
kubernetes-sigs · Mar 21, 2023 · eaa7168 · eaa7168
1 parent d523cf1
commit eaa7168
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/cloud/scope/cluster.go b/cloud/scope/cluster.go
@@ -186,8 +186,10 @@ func (s *ClusterScope) updateDefaultSG(sgID string) error {
 	options.SetSecurityGroupID(sgID)
 	options.SetSecurityGroupRulePrototype(&vpcv1.SecurityGroupRulePrototype{
 		Direction: core.StringPtr("inbound"),
-		Protocol:  core.StringPtr("all"),
+		Protocol:  core.StringPtr("tcp"),
 		IPVersion: core.StringPtr("ipv4"),
+		PortMin:   core.Int64Ptr(6443),
+		PortMax:   core.Int64Ptr(6443),
 	})
 	_, _, err := s.IBMVPCClient.CreateSecurityGroupRule(options)
 	if err != nil {