Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support firewall/security-group #90

Open
sp-yduck opened this issue Oct 9, 2023 · 1 comment
Open

Support firewall/security-group #90

sp-yduck opened this issue Oct 9, 2023 · 1 comment
Assignees
Labels
enhancement New feature or request

Comments

@sp-yduck
Copy link
Collaborator

sp-yduck commented Oct 9, 2023

/kind feature

Describe the solution you'd like
[A clear and concise description of what you want to happen.]

Anything else you would like to add:
[Miscellaneous information that will assist in solving the issue.]

Environment:

  • Cluster-api-provider-proxmox version:
  • Proxmox VE version:
  • Kubernetes version: (use kubectl version):
  • OS (e.g. from /etc/os-release):
@sp-yduck sp-yduck self-assigned this Oct 9, 2023
@sp-yduck sp-yduck added enhancement New feature or request api-change and removed api-change labels Oct 9, 2023
@sp-yduck
Copy link
Collaborator Author

sp-yduck commented Oct 25, 2023

infra-cluster controller

  • create default security groups following https://kubernetes.io/docs/reference/networking/ports-and-protocols/
    • for controlplane vm
    • for whole vm
  • create rules on these security groups
  • create ip set [1]
    • for controlplane
    • for other nodes
  • create alias (since vm ip can be changed, better to use alias than IP/CIDR) and update ip set created at [1]
    • for controlplane vip

infra-machine controller

  • insert sercurity groups
    • user can choose multiple SGs that nodes will be
  • create alias at DC level and add these alias to ip set created at [1]
    • for each vm

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant