Skip to content

Commit

Permalink
fix: Added tfsec ignore
Browse files Browse the repository at this point in the history
  • Loading branch information
13archit committed Aug 10, 2023
1 parent 10c3a9b commit 3ea65e5
Show file tree
Hide file tree
Showing 2 changed files with 4 additions and 4 deletions.
5 changes: 2 additions & 3 deletions main.tf
Original file line number Diff line number Diff line change
@@ -1,8 +1,6 @@

#Module : label
#Description : Terraform module to create consistent naming for multiple names.
#tfsec:ignore:aws-eks-no-public-cluster-access ## To provide eks endpoint public access from local network
#tfsec:ignore:aws-eks-no-public-cluster-access-to-cidr ## To provide eks endpoint public access from local network

module "labels" {
source = "clouddrove/labels/aws"
Expand All @@ -26,7 +24,8 @@ resource "aws_cloudwatch_log_group" "default" {
kms_key_id = join("", aws_kms_key.cloudwatch_log.*.arn)
}


#tfsec:ignore:aws-eks-no-public-cluster-access ## To provide eks endpoint public access from local network
#tfsec:ignore:aws-eks-no-public-cluster-access-to-cidr ## To provide eks endpoint public access from local network
resource "aws_eks_cluster" "default" {
count = var.enabled ? 1 : 0
name = module.labels.id
Expand Down
3 changes: 2 additions & 1 deletion security_groups.tf
Original file line number Diff line number Diff line change
@@ -1,6 +1,5 @@
#Module : SECURITY GROUP
#Description : Provides a security group resource.
#tfsec:ignore:aws-ec2-no-public-egress-sgr ## To allow all outbound traffic from eks nodes.

resource "aws_security_group" "node_group" {
count = var.enabled ? 1 : 0
Expand All @@ -13,6 +12,8 @@ resource "aws_security_group" "node_group" {
#Module : SECURITY GROUP RULE EGRESS
#Description : Provides a security group rule resource. Represents a single egress group rule,
# which can be added to external Security Groups.

#tfsec:ignore:aws-ec2-no-public-egress-sgr ## To allow all outbound traffic from eks nodes.
resource "aws_security_group_rule" "node_group" {
count = var.enabled ? 1 : 0
description = "Allow all egress traffic"
Expand Down

0 comments on commit 3ea65e5

Please sign in to comment.