Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-32383

[AWS SDK Install] Port 22 is missing worker node's security group in SDK install

XMLWordPrintable

    • No
    • Rejected
    • False
    • Hide

      None

      Show
      None
    • Hide
      What: When using the AWS SDK provisioning, connecting to the compute nodes via ssh would fail.
      Fix: add port 22 to the worker security group.
      Show
      What: When using the AWS SDK provisioning, connecting to the compute nodes via ssh would fail. Fix: add port 22 to the worker security group.
    • Bug Fix
    • In Progress

      This is a clone of issue OCPBUGS-31563. The following is the description of the original issue:
      —
      Description of problem:

      Port 22 is added to the worker node security group in TF install [1]:

resource "aws_security_group_rule" "worker_ingress_ssh" {
  type          	= "ingress"
  security_group_id = aws_security_group.worker.id
  description   	= local.description

  protocol	= "tcp"
  cidr_blocks = var.cidr_blocks
  from_port   = 22
  to_port 	= 22
}

But it's missing in SDK install [2]


[1] https://github.com/openshift/installer/blob/master/data/data/aws/cluster/vpc/sg-worker.tf#L39-L48
[2] https://github.com/openshift/installer/pull/7676/files#diff-c89a0152f7d51be6e3830081d1c166d9333628982773c154d8fc9a071c8ff765R272

      Version-Release number of selected component (if applicable):

      4.16.0-0.nightly-2024-03-31-180021

      How reproducible:

      Always

      Steps to Reproduce:

          1. Create a cluster using SDK installation method
    2.
    3.

      Actual results:

      See description.

      Expected results:

      Port 22 is added to worker node's security group.

      Additional info:

              rdossant Rafael Fonseca dos Santos
              openshift-crt-jira-prow OpenShift Prow Bot
              Yunfei Jiang Yunfei Jiang
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: