cluster-api-provider-openstack icon indicating copy to clipboard operation
cluster-api-provider-openstack copied to clipboard

Reuse sec group in one project

Open jichenjc opened this issue 3 years ago • 0 comments

/kind feature

Describe the solution you'd like [A clear and concise description of what you want to happen.]

this found read from code and refactory sec group

now the sec group is per-cluster https://github.com/kubernetes-sigs/cluster-api-provider-openstack/blob/main/pkg/cloud/services/networking/securitygroups.go#L46

we check here https://github.com/kubernetes-sigs/cluster-api-provider-openstack/blob/main/pkg/cloud/services/networking/securitygroups.go#L316

so the idea is actually for one CNI e.g Calico the sec group is identical across clusters thus the idea is

  1. short team , make the sec group per project (so , create sec group once and only once)
  2. consider share sec group across projects (future)

Anything else you would like to add: [Miscellaneous information that will assist in solving the issue.]

jichenjc avatar Aug 18 '22 03:08 jichenjc