Hi, I am glad that a new feature was added to control the source cidr of the LB created by CCM.
However, on the README, it was stated in the description for this annotation as:
Description: Specifies the source CIDR list for firewall rules on the CloudStack load balancer. This restricts which IP addresses can access the load balancer.
However, in my testing, it only changes the LB source CIDR, the FW rule continue to open to 0.0.0.0/0. Although the final outcome is the same, I think the description can be clearer.
With that being said, it will be a good feature improvement to also change the source CIDR of the FW rules with this annotation.
Thanks