{"action":"closed","issue":{"url":"https://api.github.com/repos/oracle/oci-cloud-controller-manager/issues/164","repository_url":"https://api.github.com/repos/oracle/oci-cloud-controller-manager","labels_url":"https://api.github.com/repos/oracle/oci-cloud-controller-manager/issues/164/labels{/name}","comments_url":"https://api.github.com/repos/oracle/oci-cloud-controller-manager/issues/164/comments","events_url":"https://api.github.com/repos/oracle/oci-cloud-controller-manager/issues/164/events","html_url":"https://github.com/oracle/oci-cloud-controller-manager/issues/164","id":309918189,"number":164,"title":"specifying seclist for CCM to mutate","user":{"login":"daniel-garcia","id":366029,"avatar_url":"https://avatars3.githubusercontent.com/u/366029?v=4","gravatar_id":"","url":"https://api.github.com/users/daniel-garcia","html_url":"https://github.com/daniel-garcia","followers_url":"https://api.github.com/users/daniel-garcia/followers","following_url":"https://api.github.com/users/daniel-garcia/following{/other_user}","gists_url":"https://api.github.com/users/daniel-garcia/gists{/gist_id}","starred_url":"https://api.github.com/users/daniel-garcia/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/daniel-garcia/subscriptions","organizations_url":"https://api.github.com/users/daniel-garcia/orgs","repos_url":"https://api.github.com/users/daniel-garcia/repos","events_url":"https://api.github.com/users/daniel-garcia/events{/privacy}","received_events_url":"https://api.github.com/users/daniel-garcia/received_events","type":"User","site_admin":false},"labels":[{"id":684479759,"url":"https://api.github.com/repos/oracle/oci-cloud-controller-manager/labels/enhancement","name":"enhancement","color":"84b6eb","default":true}],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":4,"created_at":"2018-03-29T22:03:14Z","updated_at":"2018-04-11T08:44:21Z","closed_at":"2018-04-11T08:44:21Z","author_association":"MEMBER","body":"CCM choses the oldest seclist attached to the LB subnets in order to open up ports. For cases where there is only 1 seclist this works fine. Ideally, specifying the seclists should be something that is configurable if there are multiple seclists to consider as they may be attached to other unrelated subnets.\r\n\r\nCurrent Strategies:\r\n* only attach 1 seclist to LB subnets\r\n* turn off option for CCM to manage seclists and open up all ingress/egress on LB subnets. open up all ingress into nodeport range from lb subnets to worker node subnets.\r\n\r\nCan CCM support specifying seclist ocids?"}}
{"actor":{"display_login":"prydie"}}