[skywalking-terraform] branch main updated: Allow communication from SkyWalking UI to OAP on port 12800 (#22)

[kezhenxu94]

This is an automated email from the ASF dual-hosted git repository.

kezhenxu94 pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/skywalking-terraform.git


The following commit(s) were added to refs/heads/main by this push:
     new 76c123f  Allow communication from SkyWalking UI to OAP on port 12800 
(#22)
76c123f is described below

commit 76c123f3a52e6ebe09f5a08e11f62af456673e53
Author: Rahul Bajaj <rahulrb0...@gmail.com>
AuthorDate: Wed Aug 23 21:44:30 2023 -0400

    Allow communication from SkyWalking UI to OAP on port 12800 (#22)
---
 aws/ec2.tf | 16 +++++++++++++++-
 1 file changed, 15 insertions(+), 1 deletion(-)

diff --git a/aws/ec2.tf b/aws/ec2.tf
index 934ec14..f3f9064 100644
--- a/aws/ec2.tf
+++ b/aws/ec2.tf
@@ -31,7 +31,8 @@ resource "aws_instance" "skywalking-oap" {
   key_name = aws_key_pair.ssh-user.id
   vpc_security_group_ids = [
     aws_security_group.ssh-access.id,
-    aws_security_group.public-egress-access.id
+    aws_security_group.public-egress-access.id,
+    aws_security_group.ui-to-oap-communication.id
   ]
 }
 
@@ -91,6 +92,19 @@ resource "aws_security_group" "public-egress-access" {
   tags = var.extra_tags
 }
 
+resource "aws_security_group" "ui-to-oap-communication" {
+  name        = "ui-to-oap-communication"
+  description = "Allow communication from SkyWalking UI to SkyWalking OAP"
+  ingress {
+    from_port      = 0
+    to_port        = 12800
+    protocol       = "tcp"
+    cidr_blocks    = ["0.0.0.0/0"]
+    security_groups = [aws_security_group.public-egress-access.id]
+  }
+  tags = var.extra_tags
+}
+
 resource "local_file" "oap_instance_ips" {
   count = var.oap_instance_count
   content = join("\n", flatten([