Add cluster identifier tags to security groups

Without this, the cloud provider integration can't find the security groups when removing the ELB.
itskoko · Sep 4, 2018 · 0fc9e15 · 0fc9e15
1 parent 4b4476a
commit 0fc9e15
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 0 deletions.
diff --git a/kubernetes.yaml b/kubernetes.yaml
@@ -1212,6 +1212,11 @@ Resources:
           IpProtocol: icmp
           FromPort: -1
           ToPort: -1
+      Tags:
+        - Key: KubernetesCluster
+          Value: !Ref DomainName
+        - Key: !Join [ "/", [ "kubernetes.io/cluster", !Ref DomainName ] ]
+          Value: owned
 
   ControllerELB:
     Type: "AWS::ElasticLoadBalancing::LoadBalancer"

diff --git a/templates/worker.yaml b/templates/worker.yaml
@@ -182,6 +182,11 @@ Resources:
           IpProtocol: icmp
           FromPort: -1
           ToPort: -1
+      Tags:
+        - Key: KubernetesCluster
+          Value: !Ref DomainName
+        - Key: !Join [ "/", [ "kubernetes.io/cluster", !Ref DomainName ] ]
+          Value: owned
 
   PolicyWorker:
     Type: AWS::IAM::ManagedPolicy