Is your feature request related to a problem?
I'm providing an ingress class to my users to deploy ALBs dedicated to inbound traffic from an external CDN whose outbound IPs are listed in a prefix list, but I currently need to ask them to add the alb.ingress.kubernetes.io/security-group-prefix-lists annotation on every CDN ingress.
Describe the solution you'd like
I'd like to be able to set the prefix list in the IngressClassParams resource to avoid having to set it on every ingress using this ingress class.
Describe alternatives you've considered
My current workaround is to patch every ingress using this ingress class with Kyverno to add the alb.ingress.kubernetes.io/security-group-prefix-lists annotation.
Is your feature request related to a problem? I'm providing an ingress class to my users to deploy ALBs dedicated to inbound traffic from an external CDN whose outbound IPs are listed in a prefix list, but I currently need to ask them to add the
alb.ingress.kubernetes.io/security-group-prefix-lists
annotation on every CDN ingress.Describe the solution you'd like I'd like to be able to set the prefix list in the IngressClassParams resource to avoid having to set it on every ingress using this ingress class.
Describe alternatives you've considered My current workaround is to patch every ingress using this ingress class with Kyverno to add the
alb.ingress.kubernetes.io/security-group-prefix-lists
annotation.