Default VPC security group has inbound rule to allow all ipv4

[dharaneeshvrd]

/kind bug
/area provider/ibmcloud

What steps did you take and what happened:
[A clear and concise description of what the bug is.]

Currently I can see default security group of VPC has inbound rule to allow all ipv4.
Its being updated from here https://github.com/kubernetes-sigs/cluster-api-provider-ibmcloud/blob/main/cloud/scope/cluster.go#L159

Is there any specific reason for this?

What did you expect to happen:

Ideally we should have inbound rule to allow whatever port we required to access the cluster.

Anything else you would like to add:
[Miscellaneous information that will assist in solving the issue.]

Environment:

• Cluster-api version:
• Minikube/KIND version:
• Kubernetes version: (use kubectl version):
• OS (e.g. from /etc/os-release):

[dharaneeshvrd]

@mkumatag
Is this an expected behaviour?
Ideally we should not open all inbound traffic right?

Btw, I would like to work on this. Let me know your opinion on this.

cc @Prajyot-Parab