User Story:

As a (user persona), I want to be able to:

• Add custom security groups for compute nodes
• Add custom security groups for control plane nodes

so that I can achieve

• Control Plane and Compute nodes can support operational specific security rules. For instance: specific traffic may be required for compute vs control plane nodes.

Acceptance Criteria:

Description of criteria:

• The control plane and compute machine sections of the install config accept user input as additionalSecurityGroupIDs (when using the aws platform).

(optional) Out of Scope:

Detail about what is specifically not being delivered in the story

Engineering Details:

•  

  additionalSecurityGroupIDs:
    description: AdditionalSecurityGroupIDs contains IDs of
      additional security groups for machines, where each ID
      is presented in the format sg-xxxx.
    items:
      type: string
    type: array 

This requires/does not require a design proposal.