@@ -19,6 +19,7 @@ import (
1919 ec2model "sigs.k8s.io/aws-load-balancer-controller/pkg/model/ec2"
2020 elbv2model "sigs.k8s.io/aws-load-balancer-controller/pkg/model/elbv2"
2121 "sigs.k8s.io/aws-load-balancer-controller/pkg/networking"
22+ "sigs.k8s.io/aws-load-balancer-controller/pkg/shared_constants"
2223 gwv1 "sigs.k8s.io/gateway-api/apis/v1"
2324 "strings"
2425)
2829)
2930
3031const (
31- icmpv4Protocol = "icmp"
32- icmpv6Protocol = "icmpv6"
33-
34- icmpv4TypeForPathMtu = 3 // https://www.iana.org/assignments/icmp-parameters/icmp-parameters.xhtml#icmp-parameters-codes-3
35- icmpv4CodeForPathMtu = 4
36-
37- icmpv6TypeForPathMtu = 2 // https://www.iana.org/assignments/icmpv6-parameters/icmpv6-parameters.xhtml#icmpv6-parameters-codes-2
38- icmpv6CodeForPathMtu = 0
39-
4032 resourceIDManagedSecurityGroup = "ManagedLBSecurityGroup"
33+
34+ managedSGDescription = "[k8s] Managed SecurityGroup for LoadBalancer"
4135)
4236
4337type securityGroupOutput struct {
@@ -161,7 +155,7 @@ func (builder *securityGroupBuilderImpl) buildManagedSecurityGroup(stack core.St
161155 ingressPermissions := builder .buildManagedSecurityGroupIngressPermissions (lbConf , routes , ipAddressType )
162156 return ec2model .NewSecurityGroup (stack , resourceIDManagedSecurityGroup , ec2model.SecurityGroupSpec {
163157 GroupName : name ,
164- Description : "[k8s] Managed SecurityGroup for LoadBalancer" ,
158+ Description : managedSGDescription ,
165159 Tags : tags ,
166160 Ingress : ingressPermissions ,
167161 }), nil
@@ -223,9 +217,9 @@ func (builder *securityGroupBuilderImpl) buildManagedSecurityGroupIngressPermiss
223217
224218 if enableICMP {
225219 permissions = append (permissions , ec2model.IPPermission {
226- IPProtocol : icmpv4Protocol ,
227- FromPort : awssdk .Int32 (icmpv4TypeForPathMtu ),
228- ToPort : awssdk .Int32 (icmpv4CodeForPathMtu ),
220+ IPProtocol : shared_constants . ICMPV4Protocol ,
221+ FromPort : awssdk .Int32 (shared_constants . ICMPV4TypeForPathMtu ),
222+ ToPort : awssdk .Int32 (shared_constants . ICMPV4CodeForPathMtu ),
229223 IPRanges : []ec2model.IPRange {
230224 {
231225 CIDRIP : cidr ,
@@ -248,9 +242,9 @@ func (builder *securityGroupBuilderImpl) buildManagedSecurityGroupIngressPermiss
248242
249243 if enableICMP {
250244 permissions = append (permissions , ec2model.IPPermission {
251- IPProtocol : icmpv6Protocol ,
252- FromPort : awssdk .Int32 (icmpv6TypeForPathMtu ),
253- ToPort : awssdk .Int32 (icmpv6CodeForPathMtu ),
245+ IPProtocol : shared_constants . ICMPV6Protocol ,
246+ FromPort : awssdk .Int32 (shared_constants . ICMPV6TypeForPathMtu ),
247+ ToPort : awssdk .Int32 (shared_constants . ICMPV6CodeForPathMtu ),
254248 IPv6Range : []ec2model.IPv6Range {
255249 {
256250 CIDRIPv6 : cidr ,
0 commit comments