Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-32383

[AWS SDK Install] Port 22 is missing worker node's security group in SDK install

XMLWordPrintable

    • No
    • Rejected
    • False
    • Hide

      None

      Show
      None
    • Hide
      What: When using the AWS SDK provisioning, connecting to the compute nodes via ssh would fail.
      Fix: add port 22 to the worker security group.
      Show
      What: When using the AWS SDK provisioning, connecting to the compute nodes via ssh would fail. Fix: add port 22 to the worker security group.
    • Bug Fix
    • In Progress

      This is a clone of issue OCPBUGS-31563. The following is the description of the original issue:

      Description of problem:

      Port 22 is added to the worker node security group in TF install [1]:
      
      resource "aws_security_group_rule" "worker_ingress_ssh" {
        type          	= "ingress"
        security_group_id = aws_security_group.worker.id
        description   	= local.description
      
        protocol	= "tcp"
        cidr_blocks = var.cidr_blocks
        from_port   = 22
        to_port 	= 22
      }
      
      But it's missing in SDK install [2]
      
      
      [1] https://github.com/openshift/installer/blob/master/data/data/aws/cluster/vpc/sg-worker.tf#L39-L48
      [2] https://github.com/openshift/installer/pull/7676/files#diff-c89a0152f7d51be6e3830081d1c166d9333628982773c154d8fc9a071c8ff765R272
      
      
          

      Version-Release number of selected component (if applicable):

      4.16.0-0.nightly-2024-03-31-180021
          

      How reproducible:

      Always
          

      Steps to Reproduce:

          1. Create a cluster using SDK installation method
          2.
          3.
          

      Actual results:

      See description.
          

      Expected results:

      Port 22 is added to worker node's security group.
          

      Additional info:

          

            rdossant Rafael Fonseca dos Santos
            openshift-crt-jira-prow OpenShift Prow Bot
            Yunfei Jiang Yunfei Jiang
            Votes:
            0 Vote for this issue
            Watchers:
            5 Start watching this issue

              Created:
              Updated:
              Resolved: