infra: dev-mesh SSH allowlist carries both of paul's egress IPs (#1307)
The machine moves between two networks; a single /32 locked it out again within hours of #1296.
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
1 file changed,
+1
−1
infra/dev-mesh/compute.tf+1 −1
diff --git a/infra/dev-mesh/compute.tf b/infra/dev-mesh/compute.tf| index a9bfa64..d509f09 100644 |
| --- a/infra/dev-mesh/compute.tf |
| +++ b/infra/dev-mesh/compute.tf |
| @@ -29,7 +29,7 @@ resource "aws_key_pair" "ie_node" { |
| variable "ssh_ingress_cidr" { |
| description = "Operator IPs allowed to SSH (a /32 each)" |
| type = list(string) |
| - default = ["136.206.228.80/32", "51.155.205.89/32"] # paul, james |
| + default = ["136.206.228.80/32", "109.255.91.23/32", "51.155.205.89/32"] # paul (two networks), james |
| } |
| resource "aws_security_group" "ie_node" { |