Update terraform config for the services cluster

Signed-off-by: Koray Oksay <[email protected]>

Author: koksay

ci/services/cluster/cluster.tf

@@ -1,7 +1,7 @@
 locals {
   # it can be aquired from:
   # oci ce node-pool-options get --node-pool-option-id all | jq '.data.sources.[] | select(."source-name" | match("Oracle-Linux-8.10-2025.*OKE-1.32.*"))'
-  oci_image_id = "ocid1.image.oc1.us-sanjose-1.aaaaaaaa3rkpji3z32yqk5jaydjnxrlfwrgb5rqmyzak2ytcctjm7jrwdgya"
+  oci_image_id = "ocid1.image.oc1.us-sanjose-1.aaaaaaaamq2dmjvezc4cnnk243hj7gqlvr47hgspofof4wxeuynzom7aijqq"
 }
 
 resource "oci_containerengine_cluster" "service" {

ci/services/cluster/network.tf

@@ -211,6 +211,18 @@ resource "oci_core_security_list" "svc_lb" {
     }
   }
 
+  egress_security_rules {
+    destination      = "10.0.10.0/23"
+    destination_type = "CIDR_BLOCK"
+    protocol         = "6"
+    stateless        = false
+
+    tcp_options {
+      max = 30628
+      min = 30628
+    }
+  }
+
   ingress_security_rules {
     protocol    = "6"
     source      = "0.0.0.0/0"
@@ -234,6 +246,7 @@ resource "oci_core_security_list" "svc_lb" {
       min = 80
     }
   }
+
   ingress_security_rules {
     protocol    = "6"
     source      = "0.0.0.0/0"
@@ -434,6 +447,18 @@ resource "oci_core_security_list" "node" {
       min = 32709
     }
   }
+
+  ingress_security_rules {
+    protocol    = "6"
+    source      = "10.0.20.0/24"
+    source_type = "CIDR_BLOCK"
+    stateless   = false
+
+    tcp_options {
+      max = 30628
+      min = 30628
+    }
+  }
 }
 
 resource "oci_core_subnet" "k8s_api_endpoint" {

ci/services/cluster/variables.tf

@@ -48,7 +48,7 @@ variable "node_pool_worker_size" {
 
 variable "kubernetes_version" {
   type    = string
-  default = "v1.33.1"
+  default = "v1.34.1"
 }
 
 variable "cluster_autoscaler_min" {