Skip to content

Commit 7f7f622

Browse files
Add comments explaining where the cidr blocks are coming from
Prior to this commit we had a list of cidr blocks that are used for ingress to redpanda, but there was no explanation about where these 'magic' blocks were coming from or what they represent. Added some comments and included a link to the documentation.
1 parent fa02f35 commit 7f7f622

1 file changed

Lines changed: 10 additions & 0 deletions

File tree

customer-managed/aws/terraform/security_groups.tf

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -64,12 +64,22 @@ resource "aws_security_group" "redpanda_node_group" {
6464

6565
locals {
6666
rp_node_group_cidr_blocks = var.public_cluster ? [
67+
68+
// only used in the event that you want a public cluster, when the variable public_cluster is true
6769
"0.0.0.0/0"
70+
6871
] : [
72+
73+
// RFC 6598 reserved prefix for shared address space
74+
// https://datatracker.ietf.org/doc/html/rfc6598
6975
"100.64.0.0/10",
76+
77+
// RFC 1918 reserved IP address space for private internets
78+
// https://datatracker.ietf.org/doc/html/rfc1918
7079
"172.16.0.0/12",
7180
"192.168.0.0/16",
7281
"10.0.0.0/8",
82+
7383
]
7484
}
7585
resource "aws_security_group_rule" "redpanda_node_group" {

0 commit comments

Comments
 (0)