aws / aws/containers-roadmap

[EKS] [Fargate]: Ability to modify Default EKS Cluster Security Group for Fargate via Cloudformation

Open
#2,572 0 comments 5 reactions 0 assignees View on GitHub
EKS Fargate Proposed
Dominant language
Shell
Stars
5.4k
Forks
334
PR merge metrics
No merged PRs in 30d

Description

Community Note
Please vote on this issue by adding a 👍 [reaction](https://blog.github.com/2016-03-10-add-reactions-to-pull-requests-issues-and-comments/) to the original issue to help the community and maintainers prioritize this request
Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
If you are interested in working on this issue or have submitted a pull request, please leave a comment

Tell us about your request
What do you want us to build?
It would be nice if I were able to modify Default EKS Cluster Security Group for Fargate via Cloudformation. if i do not want to use Security group policy https://docs.aws.amazon.com/eks/latest/userguide/security-groups-for-pods.html
https://aws.amazon.com/about-aws/whats-new/2021/06/amazon-eks-pods-running-aws-fargate-support-custom-security-groups/

The only way to edit security group of Fargate pods was to use the way demonstrated in [this document](https://docs.aws.amazon.com/eks/latest/userguide/security-groups-for-pods.html#sg-pods-example-deployment).

Which service(s) is this request for?
Fargate, EKS

Tell us about the problem you're trying to solve. What are you trying to do, and why is it hard?
As mentioned above, [this documentation](https://docs.aws.amazon.com/eks/latest/userguide/security-groups-for-pods.html#sg-pods-example-deployment)

Are you currently working around this issue?
Following [https://docs.aws.amazon.com/eks/latest/userguide/security-groups-for-pods.html]
[https://aws.amazon.com/about-aws/whats-new/2021/06/amazon-eks-pods-running-aws-fargate-support-custom-security-groups/]

Contributor guide

Open the contributing guide

Research direction

Begin with the linked EKS security-groups-for-pods documentation and AWS announcement, then verify the current Fargate and CloudFormation behavior for the default cluster security group. Done means the requested security-group modification is supported for Fargate through CloudFormation and the relevant usage is documented.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, kubernetes
Domain
cloud, infrastructure, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.