amazon-vpc-cni-k8s icon indicating copy to clipboard operation
amazon-vpc-cni-k8s copied to clipboard

Enhanced subnet discovery should use configurable tags

Open dougbyrne opened this issue 1 year ago • 4 comments

What would you like to be added: The enhanced subnet discovery should use configurable tags. Currently the CNI will use any subnet in a matching VPC and AZ with the tag kubernetes.io/role/cni: 1. The CNI should have additional configurable tag filters.

Why is this needed: If multiple EKS clusters share a VPC, they will all share subnets. It is desirable to specify additional tags unique to each cluster to limit the discovery scope. An example filter might be kubernetes.io/cluster/my-example-cluster: shared.

Subnet ID tag kubernetes.io/role/cni tag kubernetes.io/cluster/my-example-cluster tag kubernetes.io/cluster/some-other-cluster Selected by my example cluster Selected by some other cluster
subnet-123 1 shared untagged :white_check_mark: Yes :x: No
subnet-456 1 untagged shared :x: No :white_check_mark: Yes
subnet-789 1 shared shared :white_check_mark: Yes :white_check_mark: Yes
subnet-abc untagged shared untagged :x: No :x: No
subnet-def untagged untagged untagged :x: No :x: No

dougbyrne avatar May 02 '24 16:05 dougbyrne

This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 14 days

github-actions[bot] avatar Jul 02 '24 00:07 github-actions[bot]

Unstale

dougbyrne avatar Jul 02 '24 00:07 dougbyrne

This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 14 days

github-actions[bot] avatar Sep 24 '24 00:09 github-actions[bot]

Unstale

dougbyrne avatar Sep 24 '24 13:09 dougbyrne