Remove unreachable NSG code
"location": "[variables('location')]",
"name": "[variables('nsgName')]",
"properties": {
- "securityRules": [
-{{if .HasWindows}}
- {
- "name": "allow_rdp",
- "properties": {
- "access": "Allow",
- "description": "Allow RDP traffic to master",
- "destinationAddressPrefix": "*",
- "destinationPortRange": "3389-3389",
- "direction": "Inbound",
- "priority": 102,
- "protocol": "Tcp",
- "sourceAddressPrefix": "*",
- "sourcePortRange": "*"
- }
- },
-{{end}}
-{{if not IsHostedMaster}}
- {
- "name": "allow_ssh",
- "properties": {
- "access": "Allow",
- "description": "Allow SSH traffic to master",
- "destinationAddressPrefix": "*",
- "destinationPortRange": "22-22",
- "direction": "Inbound",
- "priority": 101,
- "protocol": "Tcp",
- "sourceAddressPrefix": "*",
- "sourcePortRange": "*"
- }
- },
- {
- "name": "allow_kube_tls",
- "properties": {
- "access": "Allow",
- "description": "Allow kube-apiserver (tls) traffic to master",
- "destinationAddressPrefix": "*",
- "destinationPortRange": "443-443",
- "direction": "Inbound",
- "priority": 100,
- "protocol": "Tcp",
- "sourceAddressPrefix": "*",
- "sourcePortRange": "*"
- }
- }
-{{end}}
- ]
+ "securityRules": []
},
"type": "Microsoft.Network/networkSecurityGroups"
}
