aws / aws/aws-cdk

EKS: AddOn VPC CNI: Enable Security Group for Pods features

Open
#22,479 0 comments 3 reactions 0 assignees View on GitHub
@aws-cdk/aws-eks @aws-cdk/aws-eks-v2-alpha feature-request feature/coverage-gap p2
Dominant language
TypeScript
Stars
12.9k
Forks
4.6k
Avg merge
1d 19h
Merged PRs (30d)
74

Description

### Describe the feature

Currently the EKS Addon VPC CNI does not have an option to enable the necessary flags to use Security Group for Pods feature. Therefore if you use the Addon, you would have to manually patch the VPC CNI. This should rather be an option to activate directly in the Addon itself.

### Use Case

Use Security Group for Pods with EKS without having to manually patch VPC CNI.

### Proposed Solution

Add the ability to set feature flags for VPC CNI Addon.

### Other Information

_No response_

### Acknowledgements

- [ ] I may be able to implement this feature request
- [ ] This feature might incur a breaking change

### CDK version used

2.40.0

### Environment details (OS name and version, etc.)

EKS 1.24

Contributor guide

Open the contributing guide

Research direction

Start by locating the EKS Addon VPC CNI construct and the configuration path for its feature flags. Confirm which flags are required for Security Group for Pods and verify that the Addon can expose them without manual VPC CNI patching; done means the requested feature flags can be enabled directly through the Addon.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, kubernetes, typescript
Domain
cloud, infrastructure
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.