init

pkg/networking/backend_sg_provider.go

@@ -5,14 +5,15 @@ import (
 	"crypto/sha256"
 	"encoding/hex"
 	"fmt"
-	ec2types "github.com/aws/aws-sdk-go-v2/service/ec2/types"
-	"github.com/aws/smithy-go"
 	"regexp"
 	"sort"
 	"strings"
 	"sync"
 	"time"
 
+	ec2types "github.com/aws/aws-sdk-go-v2/service/ec2/types"
+	"github.com/aws/smithy-go"
+
 	awssdk "github.com/aws/aws-sdk-go-v2/aws"
 	ec2sdk "github.com/aws/aws-sdk-go-v2/service/ec2"
 	"github.com/go-logr/logr"
@@ -234,6 +235,12 @@ func (p *defaultBackendSGProvider) allocateBackendSG(ctx context.Context, resour
 	if len(sgID) > 1 {
 		p.logger.V(1).Info("Existing SG found", "id", sgID)
 		p.autoGeneratedSG = sgID
+
+		if err = p.syncBackendSGTags(ctx, sgID); err != nil {
+			p.logger.Error(err, "failed to synchronize tags of existing securityGroup", sgID)
+			return err
+		}
+		p.logger.Info("added resource tags", "resourceID", sgID)
 		return nil
 	}
 
@@ -253,6 +260,20 @@ func (p *defaultBackendSGProvider) allocateBackendSG(ctx context.Context, resour
 	return nil
 }
 
+func (p *defaultBackendSGProvider) syncBackendSGTags(ctx context.Context, sgID string) error {
+	tagSpecifications := p.buildBackendSGTags(ctx)
+
+	createReq := &ec2sdk.CreateTagsInput{
+		Resources: []string{sgID},
+		Tags:      tagSpecifications[0].Tags,
+	}
+
+	if _, err := p.ec2Client.CreateTagsWithContext(ctx, createReq); err != nil {
+		return err
+	}
+	return nil
+}
+
 func (p *defaultBackendSGProvider) buildBackendSGTags(_ context.Context) []ec2types.TagSpecification {
 	var defaultTags []ec2types.Tag
 	for key, val := range p.defaultTags {