Repository navigation

example(iaas): restrict the egress of a VM with the STACKIT Server Agent - #37

Merged

mauritzuph merged 38 commits into

stackitcloud:mainfrom

devpie:example/iaas-server-agent-restricted-egress

Oct 20, 2026

Merged

example(iaas): restrict the egress of a VM with the STACKIT Server Agent#37
mauritzuph merged 38 commits into
stackitcloud:mainfrom
devpie:example/iaas-server-agent-restricted-egress

Commits on Oct 15, 2026
- example(iaas): scaffold the restricted egress example
  Jan Marco Schreier
  committed
  35cbf58
- example(iaas): add network area, project and network
  Jan Marco Schreier
  committed
  968a872
- example(iaas): add security groups and the egress allow-list
  Jan Marco Schreier
  committed
  8e1c026
- example(iaas): remove the default egress rules of the target
  Jan Marco Schreier
  committed
  5c25454
- example(iaas): add cloud-init for the jump host and the probe
  Jan Marco Schreier
  committed
  e060902
- example(iaas): add the jump host and the target server
  Jan Marco Schreier
  committed
  08568a1
- example(iaas): add outputs with SSH and verify commands
  Jan Marco Schreier
  committed
  b7325d3
- example(iaas): add tfvars example and reject its placeholders
  Jan Marco Schreier
  committed
  7285e62
- docs(iaas): document the restricted egress example
  Jan Marco Schreier
  committed
  a8a3fac
- fix(iaas): read the rules from the list endpoint of the IaaS API
  Jan Marco Schreier
  committed
  d8756b3
- docs(iaas): describe the rule listing of the removal script
  Jan Marco Schreier
  committed
  6ec4f37
- fix(iaas): limit nameservers to three distinct addresses
  Jan Marco Schreier
  committed
  c0472cd
- docs(iaas): say that an egress entry becomes one rule per range
  Jan Marco Schreier
  committed
  08b4831
- docs(iaas): drop the completeness claim about egress_rules
  Jan Marco Schreier
  committed
  c76babd
- docs(iaas): name the provider as the one that refuses the delete
  Jan Marco Schreier
  committed
  80792df
- docs(iaas): note that the key pair name is unique per account
  Jan Marco Schreier
  committed
  9e4e438
- docs(iaas): state the ingress rules Terraform adds to each group
  Jan Marco Schreier
  committed
  115c614
- docs(iaas): say from which point on the probe logs connections
  Jan Marco Schreier
  committed
  2b942c3
- docs(iaas): cite the sources of the metadata service address
  Jan Marco Schreier
  committed
  2d26848
- docs(iaas): link the portal guide for enabling Run Command
  Jan Marco Schreier
  committed
  8592e36
- example(iaas): add a check for a destination outside the allow-list
  Jan Marco Schreier
  committed
  1ced2ef
- docs(iaas): quote the concepts page on same-group traffic
  Jan Marco Schreier
  committed
  5337e84
- docs(iaas): tell a blocked connection from a failed DNS lookup
  Jan Marco Schreier
  committed
  25eb98e
- example(iaas): give a service account the role run-command.editor
  Jan Marco Schreier
  committed
  3c8bbe6
- docs(iaas): explain who may send Run Command and how to switch to it
  Jan Marco Schreier
  committed
  19c71d2
- docs(iaas): list the Run Command account among the outputs
  Jan Marco Schreier
  committed
  229f13c
- fix(iaas): allow DHCP and drop DNS and HTTPS from the egress default
  Jan Marco Schreier
  committed
  8d6bd56
- docs(iaas): explain how admin_cidr can miss the address STACKIT sees
  Jan Marco Schreier
  committed
  e1c79c2
- docs(iaas): check the data source without SSH and tighten the wording
  Jan Marco Schreier
  committed
  11d8463
Commits on Oct 16, 2026
- refactor(iaas): drop the egress probe and the open mode
  Jan Marco Schreier
  committed
  3b1e0b8
- docs(iaas): align comments and README with the trimmed example
  Jan Marco Schreier
  committed
  254f8f0
- example(iaas): reject the remaining placeholders of the tfvars example
  Jan Marco Schreier
  committed
  ab30f3c
- docs(iaas): shorten the README of the egress example
  Jan Marco Schreier
  committed
  e586a17
- refactor(iaas): delete the default egress rules inline, without scripts/
  Jan Marco Schreier
  committed
  3b7e260
- fix(iaas): bound the curl calls and accept an already deleted rule
  Jan Marco Schreier
  committed
  d017c52
- docs(iaas): add the region to CLI calls and close gaps in the README
  Jan Marco Schreier
  committed
  9aebc88
Commits on Oct 19, 2026
- refactor(iaas): move the jump host's cloud-config into a template
  Jan Marco Schreier
  committed
  59e1fea
- refactor(iaas): load the default-rule deletion from a shell script
  Jan Marco Schreier
  committed
  c7c58d1

Commits

Commits on Oct 15, 2026

Commits on Oct 16, 2026

Commits on Oct 19, 2026