Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[BUG][Functional] Adding a second CIDR to a VPC doesn't create a blackhole in the segregated TGW route for the second CIDR #931

Open
jblaplace opened this issue Feb 25, 2022 · 0 comments
Assignees
Labels
1-Codebase Related to the SEA Solution/automation tooling 2-Bug/Issue Something isn't working

Comments

@jblaplace
Copy link
Contributor

Bug reports which fail to provide the required information will be closed without action.

Required Basic Info

  • Accelerator Version: 1.5.0
  • Install Type: Clean
  • Upgrade from version: N/A

Describe the bug
We added a second CIDR block to a shared VPC and created new subnets out of that CIDR block.
SM ran fine, CIDR block was added to VPC, subnets were created as expected. All 'propagated' routes in the TGW RT had routes to the new CIDR range BUT the segregated route table only shows a static black hole for the first CIDR block. There is no blackhole for the second CIDR block. This is a security issue where you could have inter shared_vpc communications (ie: dev talks to prod vpc).

Failure Info

  • What error messages have you identified, if any: N/A
  • What symptoms have you identified, if any: No blackhole in the segregated RT that covers the new CIDR block.

Required files

  • Please provide a copy of your config.json file (sanitize if required)

Steps To Reproduce

  1. Go to '...'
  2. Click on '....'
  3. See error

Expected behavior
A clear and concise description of what you expected to happen.
A new Static Blackhole should be created that covers the new CIDR range.

Screenshots
If applicable, add screenshots to help explain your problem.

Additional context
Add any other context about the problem here.

@Brian969 Brian969 added 1-Codebase Related to the SEA Solution/automation tooling 2-Bug/Issue Something isn't working labels Feb 28, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
1-Codebase Related to the SEA Solution/automation tooling 2-Bug/Issue Something isn't working
Projects
None yet
Development

No branches or pull requests

3 participants