Skip to content

Conversation

@robo-cap
Copy link
Member

Add option to create NSGs with stateless rules.

@oracle-contributor-agreement oracle-contributor-agreement bot added the OCA Verified All contributors have signed the Oracle Contributor Agreement. label Oct 29, 2025
@robo-cap robo-cap requested a review from hyder October 29, 2025 13:20
@hyder
Copy link
Contributor

hyder commented Nov 19, 2025

Can you please elaborate why:

  1. we need stateless rules here
    2)all rules need to be stateless?

@robo-cap
Copy link
Member Author

Can you please elaborate why:

  1. we need stateless rules here
    2)all rules need to be stateless?
  1. With this PR I want to provide the option to choose between stateful and stateless rules via the use_stateless_rules variable.
  2. Stateless rules will be used by default for the ease of setup and troubleshooting.
  3. Egress rules to 0.0.0.0/0 from pods and worker nodes will be stateful independent of the value for use_stateless_rules variable because of security concerns.
  4. It's recommended to use stateless rules for large clusters.
  5. I strongly recommend for stateless rules setup to be tested before using it in production. This is why for now it is considered EXPERIMENTAL.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

OCA Verified All contributors have signed the Oracle Contributor Agreement.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants