Replace security group rules

Add stateful SG rule; note: rules are evaluated as allow-list

yc vpc security-group update-rules <name> --add-rule 'direction=ingress,port=443,protocol=tcp,v4-cidrs=[0.0.0.0/0]'
tool
yc32 commands
tags
ycnetworksecurityvpc

More yc commands

  • Inspect network load balancer
    yc load-balancer network-load-balancer get <name> --format json | jq '.listeners,.attached_target_groups'

    Dump NLB listeners and target groups to debug routing

  • List L7 load balancers
    yc application-load-balancer load-balancer list --format json | jq -r '.[]|[.name,.status]|@tsv'

    Enumerate ALB instances and health status across folder

  • Create public DNS zone
    yc dns zone create --name myzone --zone example.com. --public-visibility

    Public zone; FQDN trailing dot required, then delegate NS at registrar

  • Add DNS A record
    yc dns zone add-records --name myzone --record '@ 600 A 1.2.3.4'

    Add apex A record with 600s TTL; @ means the zone root

  • Create VM with cloud-init
    yc compute instance create --name web-1 --zone ru-central1-a --network-interface subnet-name=sub-a,nat-ip-version=ipv4 --create-boot-disk image-family=ubuntu-2204-lts,size=20 --metadata-from-file user-data=cloud-init.yaml

    Boot VM with public NAT IP and cloud-init user-data bootstrap

all 32 yc commands