-
Notifications
You must be signed in to change notification settings - Fork 1.6k
Description
Describe the feature you are requesting
Extend user friendliness configuration of Ingress resources.
Motivation
It‘s anoying to specify e.g. SecurityGroupIds, or allowed CIDR ranges on an ingress base. I need to do this hundreds of times in my environment.
It would be more easy to define like 2 Kinds of ingresses (IngressClassParams) (e.g. public reachable service and only via company VPN reachable services).
For cases where you have dedicated security groups per services it would help to have another annotation on the ingress to allow selecting a security group by name or specified tags.
If specifying tags on the ingress they override by aws eks auto-mode needed tags so that it breaks. The tags annotation should only be treated as additional tags.
Describe the proposed solution you'd like
In my opinion the most user friendly case is to extend the IngressClassParams resource.
Describe alternatives you've considered
Contribution Intention (Optional)
-[x] Yes, I am willing to contribute a PR to implement this feature
-[ ] No, I cannot work on a PR at this time