cluster-api-provider-openstack
cluster-api-provider-openstack copied to clipboard
Reuse sec group in one project
/kind feature
Describe the solution you'd like [A clear and concise description of what you want to happen.]
this found read from code and refactory sec group
now the sec group is per-cluster https://github.com/kubernetes-sigs/cluster-api-provider-openstack/blob/main/pkg/cloud/services/networking/securitygroups.go#L46
we check here https://github.com/kubernetes-sigs/cluster-api-provider-openstack/blob/main/pkg/cloud/services/networking/securitygroups.go#L316
so the idea is actually for one CNI e.g Calico the sec group is identical across clusters thus the idea is
- short team , make the sec group per project (so , create sec group once and only once)
- consider share sec group across projects (future)
Anything else you would like to add: [Miscellaneous information that will assist in solving the issue.]