Merge pull request #5602 from mikesplain/fix_api_lb_additiona_sec_groups

Fix additional security groups changes on api lb
kubernetes · Aug 14, 2018 · f19fc37 · f19fc37
2 parents fdc02d0 + 613d163
commit f19fc37
Showing 1 changed file with 13 additions and 0 deletions.
diff --git a/upup/pkg/fi/cloudup/awstasks/load_balancer.go b/upup/pkg/fi/cloudup/awstasks/load_balancer.go
@@ -551,6 +551,19 @@ func (_ *LoadBalancer) RenderAWS(t *awsup.AWSAPITarget, a, e, changes *LoadBalan
 			}
 		}
 
+		if changes.SecurityGroups != nil {
+			request := &elb.ApplySecurityGroupsToLoadBalancerInput{}
+			request.LoadBalancerName = aws.String(loadBalancerName)
+			for _, sg := range e.SecurityGroups {
+				request.SecurityGroups = append(request.SecurityGroups, sg.ID)
+			}
+
+			glog.V(2).Infof("Updating Load Balancer Security Groups")
+			if _, err := t.Cloud.ELB().ApplySecurityGroupsToLoadBalancer(request); err != nil {
+				return fmt.Errorf("Error updating security groups on Load Balancer: %v", err)
+			}
+		}
+
 		if changes.Listeners != nil {
 
 			elbDescription, err := findLoadBalancerByLoadBalancerName(t.Cloud, loadBalancerName)