Can not find any configuration for NSG or SecuriyList in IngressClassParameters

[jerry-d-deng]

Hello，

In the 'api/v1beta1/ingressclassparameters_types.go' file, within the IngressClassParametersSpec struct, only compartmentId, subnetId, loadBalancerName, isPrivate, reservedPublicAddressId, maxBandwidthMbps and minBandwidthMbps are available for LB configuration. However, I believe this may not be sufficient.

I think configurations related to NSG, Error logs, Access logs are also very important for LB.

[nirpai]

@jerry-d-deng Thanks for reaching out. WIll add this to our backlog.

[galovics]

I also support this. Currently if you use the terraform-oci-oke terraform module to set up a cluster and install the oci-native-ingress-controller, you have a very hard time to automatically provision a load balancer with proper access control.

Please add the support for NSGs.

[galovics]

In fact this is a blocker for me at the moment. Unfortunately the terraform-oci-oke module just doesn't support expanding the security list for the public load balancer subnet and I'm simply unable to allow the necessary traffic (from the internet and to the worker nodes).
Our infra used to rely on pre-existing load balancers where we could easily define the NSG needed but wanted to move away from it to be more flexible.

Any chance this can quickly get fixed?

[nirpai]

Adding support for NSG is in roadmap but not yet prioritized. Will keep you posted.

[galovics]

@nirpai is the roadmap publicly available and is there any way to affect the priorities?

[galovics]

@nirpai any update on this?

[nirpai]

@galovics Can you please cut a support ticket with Oracle. This will help us in tracking and prioritizing the effort.

[galovics]

@nirpai can you please point me to the right direction on what ticket to open and where? I assume you mean support.oracle.com but what kind of ticket should I open?

[nirpai]

Please create a technical service request.

[galovics]

@nirpai opened one, thanks.

[galovics]

@nirpai any updates?

[nirpai]

Can you please share the ticket?

[galovics]

@nirpai unfortunately the ticket got closed by the support team. Let me try to influence it on other channels.

[galovics]

@nirpai any update?

[nirpai]

I still do not have any associated ticket. Can you share the SR detsils?

[nirpai]

@galovics Recieved the internal ticket. Will keep you posted.

[galovics]

Thanks @nirpai.