adding bastion outbound rule

Azure · Mar 29, 2024 · 48ba273 · 48ba273
1 parent 7567a04
commit 48ba273
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/bicep/azhop.bicep b/bicep/azhop.bicep
@@ -630,7 +630,8 @@ var config = {
       AllowLustreSubnetAnyOutbound: ['430', 'Outbound', 'Allow', '*', 'All', 'subnet', 'lustre', 'subnet', 'lustre']
     }
     bastion: {
-      AllowBastionIn              : ['530', 'Inbound', 'Allow', 'Tcp', 'Bastion', 'subnet', 'bastion', 'tag', 'VirtualNetwork']
+      AllowBastionIn              : ['530', 'Inbound' , 'Allow', 'Tcp', 'Bastion', 'subnet', 'bastion', 'tag', 'VirtualNetwork']
+      AllowBastionOut             : ['531', 'Outbound', 'Allow', 'Tcp', 'Bastion', 'subnet', 'bastion', 'tag', 'VirtualNetwork']
     }
     gateway: {
       AllowInternalWebUsersIn     : ['540', 'Inbound', 'Allow', 'Tcp', 'Web', 'subnet', 'gateway', 'asg', 'asg-ondemand']

diff --git a/tf/variables_local.tf b/tf/variables_local.tf
@@ -529,7 +529,8 @@ locals {
     }
 
     bastion_nsg_rules = {
-        AllowBastionIn              = ["530", "Inbound", "Allow", "Tcp", "Bastion",            "subnet/bastion",           "tag/VirtualNetwork"],
+        AllowBastionIn              = ["530", "Inbound" , "Allow", "Tcp", "Bastion",            "subnet/bastion",           "tag/VirtualNetwork"],
+        AllowBastionOu              = ["531", "Outbound", "Allow", "Tcp", "Bastion",            "subnet/bastion",           "tag/VirtualNetwork"],
     }
 
     gateway_nsg_rules = {