Update Security Group @aknysh (#141)
what
- Update Security Group
why
-
This module creates an EKS cluster, which automatically creates an EKS-managed Security Group in which all managed nodes are placed automatically by EKS, and unmanaged nodes could be placed
by the user, to ensure the nodes and control plane can communicate. -
Before version
0.45.0
, this module, by default, created an additional Security Group. Prior to version0.19.0
of this module, that additional Security Group was the only one exposed by
this module (because EKS at the time did not create the managed Security Group for the cluster), and it was intended that all worker nodes (managed and unmanaged) be placed in this
additional Security Group. With version0.19.0
, this module exposed the managed Security Group created by the EKS cluster, in which all managed node groups are placed by default. We now
recommend placing non-managed node groups in the EKS-created Security Group as well by using theallowed_security_group_ids
variable, and not create an additional Security Group.