@@ -19,6 +19,7 @@ import (
19
19
ec2model "sigs.k8s.io/aws-load-balancer-controller/pkg/model/ec2"
20
20
elbv2model "sigs.k8s.io/aws-load-balancer-controller/pkg/model/elbv2"
21
21
"sigs.k8s.io/aws-load-balancer-controller/pkg/networking"
22
+ "sigs.k8s.io/aws-load-balancer-controller/pkg/shared_constants"
22
23
gwv1 "sigs.k8s.io/gateway-api/apis/v1"
23
24
"strings"
24
25
)
28
29
)
29
30
30
31
const (
31
- icmpv4Protocol = "icmp"
32
- icmpv6Protocol = "icmpv6"
33
-
34
- icmpv4TypeForPathMtu = 3 // https://www.iana.org/assignments/icmp-parameters/icmp-parameters.xhtml#icmp-parameters-codes-3
35
- icmpv4CodeForPathMtu = 4
36
-
37
- icmpv6TypeForPathMtu = 2 // https://www.iana.org/assignments/icmpv6-parameters/icmpv6-parameters.xhtml#icmpv6-parameters-codes-2
38
- icmpv6CodeForPathMtu = 0
39
-
40
32
resourceIDManagedSecurityGroup = "ManagedLBSecurityGroup"
33
+
34
+ managedSGDescription = "[k8s] Managed SecurityGroup for LoadBalancer"
41
35
)
42
36
43
37
type securityGroupOutput struct {
@@ -161,7 +155,7 @@ func (builder *securityGroupBuilderImpl) buildManagedSecurityGroup(stack core.St
161
155
ingressPermissions := builder .buildManagedSecurityGroupIngressPermissions (lbConf , routes , ipAddressType )
162
156
return ec2model .NewSecurityGroup (stack , resourceIDManagedSecurityGroup , ec2model.SecurityGroupSpec {
163
157
GroupName : name ,
164
- Description : "[k8s] Managed SecurityGroup for LoadBalancer" ,
158
+ Description : managedSGDescription ,
165
159
Tags : tags ,
166
160
Ingress : ingressPermissions ,
167
161
}), nil
@@ -223,9 +217,9 @@ func (builder *securityGroupBuilderImpl) buildManagedSecurityGroupIngressPermiss
223
217
224
218
if enableICMP {
225
219
permissions = append (permissions , ec2model.IPPermission {
226
- IPProtocol : icmpv4Protocol ,
227
- FromPort : awssdk .Int32 (icmpv4TypeForPathMtu ),
228
- ToPort : awssdk .Int32 (icmpv4CodeForPathMtu ),
220
+ IPProtocol : shared_constants . ICMPV4Protocol ,
221
+ FromPort : awssdk .Int32 (shared_constants . ICMPV4TypeForPathMtu ),
222
+ ToPort : awssdk .Int32 (shared_constants . ICMPV4CodeForPathMtu ),
229
223
IPRanges : []ec2model.IPRange {
230
224
{
231
225
CIDRIP : cidr ,
@@ -248,9 +242,9 @@ func (builder *securityGroupBuilderImpl) buildManagedSecurityGroupIngressPermiss
248
242
249
243
if enableICMP {
250
244
permissions = append (permissions , ec2model.IPPermission {
251
- IPProtocol : icmpv6Protocol ,
252
- FromPort : awssdk .Int32 (icmpv6TypeForPathMtu ),
253
- ToPort : awssdk .Int32 (icmpv6CodeForPathMtu ),
245
+ IPProtocol : shared_constants . ICMPV6Protocol ,
246
+ FromPort : awssdk .Int32 (shared_constants . ICMPV6TypeForPathMtu ),
247
+ ToPort : awssdk .Int32 (shared_constants . ICMPV6CodeForPathMtu ),
254
248
IPv6Range : []ec2model.IPv6Range {
255
249
{
256
250
CIDRIPv6 : cidr ,
0 commit comments