thapakazi/security_groups_for_pods_todo.md

Created August 19, 2021 08:06

Star (0) You must be signed in to star a gist
Fork (0) You must be signed in to fork a gist

Learn more about clone URLs
Clone this repository at <script src="https://gist.github.com/thapakazi/51371238ba184b3c9f9d6b9a14e2d80e.js"></script>
Save thapakazi/51371238ba184b3c9f9d6b9a14e2d80e to your computer and use it in GitHub Desktop.

Download ZIP

security_groups_for_pods_todo.md

Raw

security_groups_for_pods_todo.md

enable pod eni: https://github.com/aws/amazon-vpc-cni-k8s#enable_pod_eni-v170

kubectl -n kube-system set env daemonset aws-node ENABLE_POD_ENI=true

for healthcheck set, DISABLE_TCP_EARLY_DEMUX=true for init container https://github.com/aws/amazon-vpc-cni-k8s#disable_tcp_early_demux-v173

kubectl patch daemonset aws-node -n kube-system -p '{"spec": {"template": {"spec": {"initContainers": [{"env":[{"name":"DISABLE_TCP_EARLY_DEMUX","value":"true"}],"name":"aws-vpc-cni-init"}]}}}}'