Associated Security group rule entry is not deleted from EC2 instance on deleting LoadBalancer service

4.17.z, 4.18.z

Always

When an OpenShift Service of type LoadBalancer is created on a cluster running on AWS, an Elastic Load Balancer (ELB) is automatically provisioned.
AWS creates a dedicated security group for this ELB, and that group is configured to allow inbound traffic (e.g., TCP/443).AWS modifies the security group of EC2 instances (i.e., the OpenShift nodes) by adding an inbound rule that allows traffic from the ELB security group.
When the LoadBalancer service is deleted, AWS:
- Automatically deletes the ELB.
- Deletes the ELB's security group.
- However, AWS does not automatically clean up the inbound rule in the OCP node’s security group that referenced the ELB's security group (even though that group no longer exists).