{"action":"created","issue":{"url":"https://api.github.com/repos/kubernetes/kubernetes/issues/15500","labels_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/15500/labels{/name}","comments_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/15500/comments","events_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/15500/events","html_url":"https://github.com/kubernetes/kubernetes/pull/15500","id":111057354,"number":15500,"title":"Fix for #14504","user":{"login":"chrisleck","id":13987499,"avatar_url":"https://avatars.githubusercontent.com/u/13987499?v=3","gravatar_id":"","url":"https://api.github.com/users/chrisleck","html_url":"https://github.com/chrisleck","followers_url":"https://api.github.com/users/chrisleck/followers","following_url":"https://api.github.com/users/chrisleck/following{/other_user}","gists_url":"https://api.github.com/users/chrisleck/gists{/gist_id}","starred_url":"https://api.github.com/users/chrisleck/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/chrisleck/subscriptions","organizations_url":"https://api.github.com/users/chrisleck/orgs","repos_url":"https://api.github.com/users/chrisleck/repos","events_url":"https://api.github.com/users/chrisleck/events{/privacy}","received_events_url":"https://api.github.com/users/chrisleck/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/kubernetes/kubernetes/labels/area/platform/aws","name":"area/platform/aws","color":"d4c5f9"},{"url":"https://api.github.com/repos/kubernetes/kubernetes/labels/cla:%20yes","name":"cla: yes","color":"bfe5bf"},{"url":"https://api.github.com/repos/kubernetes/kubernetes/labels/size/L","name":"size/L","color":"ee9900"}],"state":"open","locked":false,"assignee":{"login":"brendandburns","id":5751682,"avatar_url":"https://avatars.githubusercontent.com/u/5751682?v=3","gravatar_id":"","url":"https://api.github.com/users/brendandburns","html_url":"https://github.com/brendandburns","followers_url":"https://api.github.com/users/brendandburns/followers","following_url":"https://api.github.com/users/brendandburns/following{/other_user}","gists_url":"https://api.github.com/users/brendandburns/gists{/gist_id}","starred_url":"https://api.github.com/users/brendandburns/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/brendandburns/subscriptions","organizations_url":"https://api.github.com/users/brendandburns/orgs","repos_url":"https://api.github.com/users/brendandburns/repos","events_url":"https://api.github.com/users/brendandburns/events{/privacy}","received_events_url":"https://api.github.com/users/brendandburns/received_events","type":"User","site_admin":false},"milestone":null,"comments":21,"created_at":"2015-10-12T21:11:40Z","updated_at":"2015-11-12T07:10:17Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/kubernetes/kubernetes/pulls/15500","html_url":"https://github.com/kubernetes/kubernetes/pull/15500","diff_url":"https://github.com/kubernetes/kubernetes/pull/15500.diff","patch_url":"https://github.com/kubernetes/kubernetes/pull/15500.patch"},"body":"What's the recommended way to e2e test this against AWS?\n\n<!-- Reviewable:start -->\n[<img src=\"https://reviewable.io/review_button.png\" height=40 alt=\"Review on Reviewable\"/>](https://reviewable.io/reviews/kubernetes/kubernetes/15500)\n<!-- Reviewable:end -->\n"},"comment":{"url":"https://api.github.com/repos/kubernetes/kubernetes/issues/comments/156020125","html_url":"https://github.com/kubernetes/kubernetes/pull/15500#issuecomment-156020125","issue_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/15500","id":156020125,"user":{"login":"pikeas","id":686573,"avatar_url":"https://avatars.githubusercontent.com/u/686573?v=3","gravatar_id":"","url":"https://api.github.com/users/pikeas","html_url":"https://github.com/pikeas","followers_url":"https://api.github.com/users/pikeas/followers","following_url":"https://api.github.com/users/pikeas/following{/other_user}","gists_url":"https://api.github.com/users/pikeas/gists{/gist_id}","starred_url":"https://api.github.com/users/pikeas/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pikeas/subscriptions","organizations_url":"https://api.github.com/users/pikeas/orgs","repos_url":"https://api.github.com/users/pikeas/repos","events_url":"https://api.github.com/users/pikeas/events{/privacy}","received_events_url":"https://api.github.com/users/pikeas/received_events","type":"User","site_admin":false},"created_at":"2015-11-12T07:10:17Z","updated_at":"2015-11-12T07:10:17Z","body":"+1, would like to see this resolved. I'm fairly new to k8s, so I'm still wrapping my head around the architecture/terminology, but I'd like to see per-ELB SGs.\r\n\r\nIn other words:\r\n\r\n1) Service A is created, exposing port 80 to container port 8080.\r\n2) A new SG is created allowing inbound 80 from 0.0.0.0/0. \r\n3) An AWS ELB is created in the new SG.\r\n4) An ingress rule is added to every minion scheduled to run this pod, allowing ingress to 8080 from the new SG.\r\n\r\nThis would entail changing security groups every time a pod belonging to a publicly exposed service is rescheduled to a new minion. An intermediate alternative is to create a new SG per ELB, and add ingress access to the main minion SG."}}