Our security-groups are currently comparing CIDRs as raw strings. A valid prefix such as 203.0.113.5/24 never matches the value returned by STACKIT, so the rule is deleted and recreated on every reconcile.
Normalize CIDRs before comparison and avoid treating SSH rules with no ipRange as removable rules.
Our security-groups are currently comparing CIDRs as raw strings. A valid prefix such as
203.0.113.5/24never matches the value returned by STACKIT, so the rule is deleted and recreated on every reconcile.Normalize CIDRs before comparison and avoid treating SSH rules with no
ipRangeas removable rules.