Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

DRIVERS-2987 Restrict access to Azure VMs #514

Merged
merged 6 commits into from
Oct 2, 2024
Merged

DRIVERS-2987 Restrict access to Azure VMs #514

merged 6 commits into from
Oct 2, 2024

Commits on Sep 26, 2024

  1. remove default network security group rule 

    Default opens SSH and RDP to internet.
    @kevinAlbs
    kevinAlbs committed Sep 26, 2024
    Configuration menu
    Copy the full SHA
    c034893 View commit details
    Browse the repository at this point in the history

Commits on Oct 1, 2024

  1. create NSG rule with current IP

    @kevinAlbs
    kevinAlbs committed Oct 1, 2024
    Configuration menu
    Copy the full SHA
    aa5af2b View commit details
    Browse the repository at this point in the history

  2. add set-ssh-ip.sh to add current IP 

    Needed since Azure KMS task group may run scripts across multiple Evergreen hosts.
    @kevinAlbs
    kevinAlbs committed Oct 1, 2024
    Configuration menu
    Copy the full SHA
    8cfc3e9 View commit details
    Browse the repository at this point in the history

  3. add -n to ssh commands 

    To prevent reading from stdin. Fixes interaction when script is run with Evergreen `shell.exec`. `shell.exec` reads commands from stdin by default.
    @kevinAlbs
    kevinAlbs committed Oct 1, 2024
    Configuration menu
    Copy the full SHA
    8ed1478 View commit details
    Browse the repository at this point in the history

  4. update OIDC script

    @kevinAlbs
    kevinAlbs committed Oct 1, 2024
    Configuration menu
    Copy the full SHA
    0c15966 View commit details
    Browse the repository at this point in the history

  5. silence stdout 

    To avoid printing JSON blob in logs. Still prints errors
    @kevinAlbs
    kevinAlbs committed Oct 1, 2024
    Configuration menu
    Copy the full SHA
    641b859 View commit details
    Browse the repository at this point in the history