aws / aws/amazon-vpc-resource-controller-k8s
ENI tagging - SG for PODs
- Dominant language
- Go
- Stars
- 106
- Forks
- 71
- Avg merge
- 10h 28m
- Merged PRs (30d)
- 6
Description
When using SG for PODS, an ENI gets attached to each POD.
[AWS Network Firewall supports tag-based filtering with ENIs as resources. ](https://docs.aws.amazon.com/network-firewall/latest/developerguide/resource-group-creating.html)
This request is to enable ENI tagging by the VPC CNI by the use of annotations so that AWS Network Firewall can leverage those to filter traffic.
Tags could be things like:
- namespace
- VPC ID
- subnet ID
- Security Group ID
- custom tags specified by user in annotations
Contributor guide
Research direction
Start by tracing the VPC CNI path that creates ENIs for pods and handling for pod annotations. Review the AWS Network Firewall tag requirements linked in the issue. Done means supported annotations produce the requested tags on pod ENIs, with tests covering the tagging behavior.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- aws, go, kubernetes
- Domain
- cloud, networking, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 48/100