Sets security group

cloudfoundry · Jun 10, 2024 · 9f0576d · 9f0576d
1 parent 9fe9d11
commit 9f0576d
Show file tree

Hide file tree

Showing 2 changed files with 16 additions and 0 deletions.
diff --git a/ci/infrastructure/assets/multiapps-postgres-security-group.json b/ci/infrastructure/assets/multiapps-postgres-security-group.json
@@ -0,0 +1,8 @@
+ [
+      {
+        "protocol": "tcp",
+        "destination": "10.0.255.0/24",
+        "ports": "5524",
+        "description": "Allow postgres traffic from"
+      }
+ ]
diff --git a/ci/infrastructure/scripts/deploy-multiapps-controller.sh b/ci/infrastructure/scripts/deploy-multiapps-controller.sh
@@ -26,6 +26,13 @@ function deploy_multiapps_controller() {
   cf push -f manifest.yml
 }
 
+function add_postrgres_security_group() {
+  pushd ${CI_DIR}/infrastructure/assets
+    cf create-security-group multiapps-postgres-security-group multiapps-postgres-security-group.json
+    cf bind-security-group multiapps-postgres-security-group ${cf_org} --space ${cf_space}
+  popd
+}
+
 function cleanup_multiapps_controller() {
   cf delete -f multiapps-controller
   cf delete-service -f deploy-service-database
@@ -35,4 +42,5 @@ load_bbl_vars
 cf_login
 cleanup_multiapps_controller
 create_postgres_service
+add_postrgres_security_group
 deploy_multiapps_controller