Currently, CAPO is very opinionated when Security Groups are managed and over time too many rules were added without enough flexibility.

In OpenShift, we need more than the default rules for both the control plane & security group. Also, we need to replace Terraform to create additional Security Groups that will later be used by the machines.

We want to achieve this in CAPO.

Upstream issue: https://github.com/kubernetes-sigs/cluster-api-provider-openstack/issues/1752

Upstream KEP: https://github.com/kubernetes-sigs/cluster-api-provider-openstack/pull/1756