Kubernetes，AWS：服务为每个服务创建额外的安全组

Question

我正在使用我们的Pod在AWS上运行的Kubernetes。我正在使用预定义的LoadBalancer规范创建服务。尽管如此，Kubernetes还是在负载均衡器中增加了一个SG。如何指定不这样做？谢谢。

service.yaml：

apiVersion: v1
kind: Service
metadata:
  labels:
    app.kubernetes.io/name: akeneo-service
    app.kubernetes.io/instance: akeneo-service-instance
    app.kubernetes.io/version: "1.0.0"
    app.kubernetes.io/component: backend
    app.kubernetes.io/managed-by: kubectl
  annotations:
      # Note that the backend talks over HTTP.
    service.beta.kubernetes.io/aws-load-balancer-backend-protocol: "ssl"
       # TODO: Fill in with the ARN of your certificate.
    service.beta.kubernetes.io/aws-load-balancer-ssl-cert: OUR_ARN
       # Only run SSL on the port named "https" below.
    service.beta.kubernetes.io/aws-load-balancer-ssl-ports: "443"
    service.beta.kubernetes.io/aws-load-balancer-extra-security-groups: "sg-0d3a65fc39e47e3cf"
  name: akeneo-service
spec:
  selector:
    app: akeneo-service
  type: LoadBalancer
  ports:
  - name: https
    port: 443
    targetPort: 443
  - name: http
    port: 80
    targetPort: 80

任何帮助都会很好。 :-)