Merge pull request #746 from mlibrary/no-more-legacy-private-firewall

Remove unnecessary firewall opening for private SSH
mlibrary · Nov 13, 2024 · 8c6e9fb · 8c6e9fb
2 parents a346fd8 + 8ead3fb
commit 8c6e9fb
Show file tree

Hide file tree

Showing 2 changed files with 0 additions and 14 deletions.
diff --git a/manifests/profile/networking/firewall/ssh.pp b/manifests/profile/networking/firewall/ssh.pp
@@ -13,11 +13,4 @@
     port  => 22,
     block => 'umich::networks::all_trusted_machines',
   }
-
-  if ! is_publicly_accessible() {
-    nebula::exposed_port { '100 Legacy Private SSH':
-      port  => 22,
-      block => 'umich::networks::private_bastion_hosts',
-    }
-  }
 }
diff --git a/spec/classes/profile/networking/firewall/ssh_spec.rb b/spec/classes/profile/networking/firewall/ssh_spec.rb
@@ -46,13 +46,6 @@
             block: 'umich::networks::all_trusted_machines',
           )
         end
-
-        it do
-          expect(subject).to contain_nebula__exposed_port('100 Legacy Private SSH').with(
-            port: 22,
-            block: 'umich::networks::private_bastion_hosts',
-          )
-        end
       end
     end
   end