Merge pull request #4583 from markdgray/fix/ipsec_aws_upi_50

Bug 1919072: AWS cloudformation change protocol from ESP to 50
openshift · Jan 22, 2021 · bd2739d · bd2739d
2 parents d19070a + 1758234
commit bd2739d
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/upi/aws/cloudformation/03_cluster_security.yaml b/upi/aws/cloudformation/03_cluster_security.yaml
@@ -160,7 +160,7 @@ Resources:
       GroupId: !GetAtt MasterSecurityGroup.GroupId
       SourceSecurityGroupId: !GetAtt MasterSecurityGroup.GroupId
       Description: IPsec ESP packets
-      IpProtocol: esp
+      IpProtocol: 50
 
   MasterIngressWorkerIpsecIke:
     Type: AWS::EC2::SecurityGroupIngress
@@ -188,7 +188,7 @@ Resources:
       GroupId: !GetAtt MasterSecurityGroup.GroupId
       SourceSecurityGroupId: !GetAtt WorkerSecurityGroup.GroupId
       Description: IPsec ESP packets
-      IpProtocol: esp
+      IpProtocol: 50
 
   MasterIngressInternal:
     Type: AWS::EC2::SecurityGroupIngress
@@ -356,7 +356,7 @@ Resources:
       GroupId: !GetAtt WorkerSecurityGroup.GroupId
       SourceSecurityGroupId: !GetAtt WorkerSecurityGroup.GroupId
       Description: IPsec ESP packets
-      IpProtocol: esp
+      IpProtocol: 50
 
   WorkerIngressMasterIpsecIke:
     Type: AWS::EC2::SecurityGroupIngress
@@ -384,7 +384,7 @@ Resources:
       GroupId: !GetAtt WorkerSecurityGroup.GroupId
       SourceSecurityGroupId: !GetAtt MasterSecurityGroup.GroupId
       Description: IPsec ESP packets
-      IpProtocol: esp
+      IpProtocol: 50
 
   WorkerIngressInternal:
     Type: AWS::EC2::SecurityGroupIngress