feat(netbird): allow yucca to reach bootstrap-resources on 443 (#1877)

Signed-off-by: Devin Buhl <devin@buhl.casa>
This commit is contained in:
Devin Buhl
2026-07-29 16:02:23 +00:00
committed by GitHub
parent 5a869ef9e4
commit 71df41b938
@@ -0,0 +1,20 @@
data "netbird_group" "bootstrap_resources" {
name = "bootstrap-resources"
}
# Allow yucca operators' workstations to reach the bootstrap resources over HTTPS
resource "netbird_policy" "yucca_to_bootstrap_resources" {
name = "yucca-to-bootstrap-resources"
enabled = true
rule {
name = "yucca-to-bootstrap-resources"
action = "accept"
protocol = "tcp"
enabled = true
bidirectional = false
sources = [netbird_group.role["yucca"].id]
destinations = [data.netbird_group.bootstrap_resources.id]
ports = ["443"]
}
}