cluster-api-provider-aws
cluster-api-provider-aws copied to clipboard
Support customisation of ingressRules for nodeSecurityGroup
/kind feature
Describe the solution you'd like
[A clear and concise description of what you want to happen.]
Recently, customisation of ingressRules was added for controlPlaneLB securityGroup.
Similarly, node security group also allows all
communication over ports 30000-32767
here https://github.com/kubernetes-sigs/cluster-api-provider-aws/blob/main/pkg/cloud/services/securitygroup/securitygroups.go#L545
If we want to have a ingressRules list for this and avoid using 0.0.0.0/0
, where is the best place to take custom ingressRule Input?
Probable options:
- AWSClusterSpec
- AWSClusterSpec.NetworkSpec
Anything else you would like to add: [Miscellaneous information that will assist in solving the issue.]
Environment:
- Cluster-api-provider-aws version: v2.2.1
- Kubernetes version: (use
kubectl version
): - OS (e.g. from
/etc/os-release
):