Skip to content

Extend IngressClassParams with allowedCIDR and securityGorp #4332

@benkeil

Description

@benkeil

Describe the feature you are requesting

Extend user friendliness configuration of Ingress resources.

Motivation

It‘s anoying to specify e.g. SecurityGroupIds, or allowed CIDR ranges on an ingress base. I need to do this hundreds of times in my environment.

It would be more easy to define like 2 Kinds of ingresses (IngressClassParams) (e.g. public reachable service and only via company VPN reachable services).

For cases where you have dedicated security groups per services it would help to have another annotation on the ingress to allow selecting a security group by name or specified tags.

If specifying tags on the ingress they override by aws eks auto-mode needed tags so that it breaks. The tags annotation should only be treated as additional tags.

Describe the proposed solution you'd like

In my opinion the most user friendly case is to extend the IngressClassParams resource.

Describe alternatives you've considered

Contribution Intention (Optional)

-[x] Yes, I am willing to contribute a PR to implement this feature
-[ ] No, I cannot work on a PR at this time

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions