Skip to content

Commit

Permalink
Fix GitHub IP Ranges Returning IPv6
Browse files Browse the repository at this point in the history
The GitHub provider is returning IPv6 IPs in addition to IPv4
IPs for the hooks. This is not compatible with AWS security
rules which require IPv4 and IPv6 IPs to be seperate.

This is a [fixed bug](integrations/terraform-provider-github#883)
in 4.14 version of the provider.
  • Loading branch information
fredericfran-gds committed Sep 20, 2021
1 parent f37b7fa commit cc01c9b
Show file tree
Hide file tree
Showing 3 changed files with 4 additions and 4 deletions.
4 changes: 2 additions & 2 deletions terraform/projects/infra-security-groups/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -9,15 +9,15 @@ Manage the security groups for the entire infrastructure
| <a name="requirement_terraform"></a> [terraform](#requirement\_terraform) | = 0.11.15 |
| <a name="requirement_aws"></a> [aws](#requirement\_aws) | 2.46.0 |
| <a name="requirement_fastly"></a> [fastly](#requirement\_fastly) | ~> 0.26.0 |
| <a name="requirement_github"></a> [github](#requirement\_github) | ~> 4.9.0 |
| <a name="requirement_github"></a> [github](#requirement\_github) | ~> 4.14.0 |

## Providers

| Name | Version |
|------|---------|
| <a name="provider_aws"></a> [aws](#provider\_aws) | 2.46.0 |
| <a name="provider_fastly"></a> [fastly](#provider\_fastly) | ~> 0.26.0 |
| <a name="provider_github"></a> [github](#provider\_github) | ~> 4.9.0 |
| <a name="provider_github"></a> [github](#provider\_github) | ~> 4.14.0 |
| <a name="provider_terraform"></a> [terraform](#provider\_terraform) | n/a |

## Modules
Expand Down
2 changes: 1 addition & 1 deletion terraform/projects/infra-security-groups/ci-master.tf
Original file line number Diff line number Diff line change
Expand Up @@ -92,7 +92,7 @@ resource "aws_security_group_rule" "ci-master-elb_ingress_github_https" {
protocol = "tcp"

security_group_id = "${aws_security_group.ci-master_elb.id}"
cidr_blocks = ["${data.github_ip_ranges.github.hooks}"]
cidr_blocks = ["${data.github_ip_ranges.github.hooks_ipv4}"]
}

resource "aws_security_group_rule" "ci-master-elb_egress_any_any" {
Expand Down
2 changes: 1 addition & 1 deletion terraform/projects/infra-security-groups/main.tf
Original file line number Diff line number Diff line change
Expand Up @@ -30,7 +30,7 @@ provider "fastly" {
}

provider "github" {
version = "~> 4.9.0"
version = "~> 4.14.0"
}

data "fastly_ip_ranges" "fastly" {}
Expand Down

0 comments on commit cc01c9b

Please sign in to comment.