aws / aws/containers-roadmap

[EKS] Remove requirement for full outbound access for worker nodes to join tge cluster

Open
#792 0 comments 0 reactions 0 assignees View on GitHub
EKS
Dominant language
Shell
Stars
5.4k
Forks
334
PR merge metrics
No merged PRs in 30d

Description

We are using EKS v8 with Kubernetes 1.14. In our setup the outbound access is restricted or blocked or require details on what destination and port the access is required.

While spinning the new EKS cluster we found that without outbound set to 0.0.0.0/0 enabled the worker nodes would not join the cluster. On discussion with AWS support we were told that for this we need to go back to EKS v3.

Can you provide the list of the external sites which EKS worker nodes are trying to access, we can whitelist them and add to SGs.

As a final solution this requirement should be removed as lot of ebterprises will not open outbound with full access.

Contributor guide

Open the contributing guide

Research direction

The issue names EKS v8, Kubernetes 1.14, worker-node cluster joining, and restricted outbound access, but mentions no repository file or test. Start by determining the destinations and ports required during node registration; done would mean documenting or removing the need for 0.0.0.0/0 access while preserving successful worker-node joins.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws
Domain
cloud, infrastructure, networking
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.