-
Notifications
You must be signed in to change notification settings - Fork 13
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
fix: removed the opening of 0.0.0.0/0 in the default value for network acls rules #424
Conversation
main.tf
Outdated
type = 1 | ||
} | ||
} | ||
} |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I don't think we want this in the root level module? There is a variable called network_acls
that allows the consumers to pass in their ACL config
cra-tf-validate-ignore-goals.json
Outdated
@@ -0,0 +1,3 @@ | |||
{ | |||
"scc_goals": [] |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
you will need to ignore all of the COS goals (not relevant to the root module here, just the example)
As for the VPC ones, we may need to review each one as a team to decide what to do
…rm-ibm-landing-zone-vpc into enable-cra
🎉 This PR is included in version 5.0.0 🎉 The release is available on:
Your semantic-release bot 📦🚀 |
…k acls rules (terraform-ibm-modules#424) BREAKING CHANGE: If you were consuming the module using the default value for var.network_acls and upgraded to this version, the `allow-all-443-inbound` and `allow-all-443-outbound` ACL rules will be removed since opening 0.0.0.0/0 is not FsCloud compliant.
Description
Replace this text with a summary of the changes in this PR. Include why the changes are needed and context about the changes. List required dependencies. If there is a Git issue for the change, please link to it.
Types of changes in this PR
https://github.ibm.com/goldeneye/issues/issues/4122
No release required
Release required
x.x.X
): Change that fixes an issue and is compatible with earlier versions)x.X.x
): Change that adds functionality and is compatible with earlier versions)X.x.x
): Change that is likely incompatible with previous versions)Release notes content
Replace this text with information that users need to know about the bug fixes, features, and breaking changes. This information helps the merger write the commit message that is published in the release notes for the module.
Checklist for reviewers
Merge actions for mergers
Merge by using "Squash and merge".
Use a relevant conventional commit message that is based on the PR contents and any release notes provided by the PR author.
The commit message determines whether a new version of the module is needed, and if so, which semver increment to use (major, minor, or patch).