Uploaded image for project: 'OpenShift Installer'
  1. OpenShift Installer
  2. CORS-3428

[bug] update additional security groups validation

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Undefined Undefined
    • None
    • None
    • None
    • None

      CAPA creates 4 security groups:

      $ aws ec2 describe-security-groups --region us-east-2 --filters "Name = group-name, Values = *rdossant*" --query "SecurityGroups[*].[GroupName]" --output text
rdossant-installer-03-tvcbd-lb
rdossant-installer-03-tvcbd-controlplane
rdossant-installer-03-tvcbd-apiserver-lb
rdossant-installer-03-tvcbd-node

      Given that the maximum number of SGs in a network interface is 16, we should update the max number validation in the installer:

      https://github.com/openshift/installer/blob/master/pkg/types/aws/validation/machinepool.go#L66

      Patrick says:

      I think we want to update this to cap the user limit to 10 additional security groups:

      More context: https://redhat-internal.slack.com/archives/C68TNFWA2/p1697764210634529?thread_ts=1697471429.293929&cid=C68TNFWA2

            padillon Patrick Dillon
            rdossant Rafael Fonseca dos Santos
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: