Skip to content
This repository was archived by the owner on Oct 7, 2021. It is now read-only.

Commit 5a6b9d9

Browse files
authored
Added ability to disable ssh access (#40)
1 parent aac2d49 commit 5a6b9d9

File tree

1 file changed

+3
-1
lines changed

1 file changed

+3
-1
lines changed

templates/kops/kops-private-topology.yaml.gotmpl

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -224,7 +224,9 @@ spec:
224224
calico: {}
225225
nonMasqueradeCIDR: {{ getenv "KOPS_NON_MASQUERADE_CIDR" "100.64.0.0/10" }}
226226
sshAccess:
227-
- 0.0.0.0/0
227+
{{- if bool (getenv "KOPS_SSH_ACCESS_ENABLED" "true") }}
228+
- {{ getenv "KOPS_SSH_ACCESS_CIDR" "0.0.0.0/0" }}
229+
{{- end }}
228230
subnets:
229231
{{- range $index, $value := (getenv "KOPS_AVAILABILITY_ZONES" | strings.Split ",") }}
230232
{{- $privateSubnets := getenv "KOPS_PRIVATE_SUBNETS" | required "KOPS_PRIVATE_SUBNETS must be defined" }}

0 commit comments

Comments
 (0)