add support for OpenStack Octavia AllowedCIDRs

[zetaab]

fixes #8383

@kciredor do you have possibility to test this? Do you know how to compile kops manually, or you want that I will compile it? If yes, what OS do you use

This needs to be tested in following use-cases:

• Old octavia new cluster
• Old octavia update sec group rules for api
• Update from old octavia to new octavia (should delete old security group)
• New octavia new cluster
• New octavia update sec group rules for api

/hold

[kciredor]

Awesome @zetaab, moving fast!

Yes I'm used to compiling/patching kops so no problem there. Will let you know as soon as I can!

[kciredor]

Works great!

I've just tested it on a new/clean cluster by adding/removing ip ranges (kops edit cluster + kops update cluster --yes) and making API calls in between.

Could this still be merged into the 1.17 release branch which is currently beta 1? That would be cool.

[zetaab]

/hold cancel

[chrisz100]

/lgtm
/approve

Thanks @zetaab :-)

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: chrisz100, zetaab

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [chrisz100,zetaab]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment