Network security groups applied to clusters

Proposers

• Shahithya Y (Tata Elxsi)
• Shrinithi R (Tata Elxsi)
• Deepika E (Tata Elxsi)
• Amit Prasad (Tata Elxsi)
• Jayaprakash G (Tata Elxsi)
• Ramesh Ramanathan (Tata Elxsi)

Description

Currently there is no operation to manage traffic to clusters in advanced cluster management. Security group will used to allow incoming and outgoing traffic of the cluster.

In this feature, user can create security group in OSM and attach that security group to the cluster. And also new rules can be added, modified or removed from security group. With this feature, user can manage all the operations in security group

Demo or definition of done

Reference demo that leverages this, or alternatively, definition of done.

added to epic &19

assigned to @yshah

The feature covers Network Security Groups (NSG) with rules to be applied to the incoming and outgoing traffic in the cluster, not to the nodes or the apps running in the cluster.

NSG will be a new first-class citizen in OSM. Its use will be restricted to clusters in the new declarative framework. It won't be applied to VMs running in IaaS.

NSG will be specific for each kind of cloud.

The implementation at NBI will be generic, but only AWS NSG will be created for the moment with this feature.

added APPROVED label

changed milestone to %Approved

changed milestone to %Design