allow only manager to connect to ssh port for idh node

2026-04-25 22:17:49 +02:00 · 2022-02-23 15:14:11 -05:00
parent 1d95aca4de
commit 61ae61953f
7 changed files with 74 additions and 5 deletions
@@ -659,7 +659,6 @@ role:
        hostgroups:
          anywhere:
            portgroups:
-              - {{ portgroups.ssh }}
            {% set idh_services = salt['pillar.get']('idh:services', []) %}
            {% for service in idh_services %}
              - {{ portgroups['idh_'~service] }}
@@ -669,4 +668,7 @@ role:
              - {{ portgroups.all }}
          localhost:
            portgroups:
-              - {{ portgroups.all }}
+              - {{ portgroups.all }}
+          manager:
+            portgroups:
+              - {{ portgroups.ssh }}