search

heptio / aws-quickstart

AWS Kubernetes cluster via CloudFormation and kubeadm
Apache License 2.0
223 stars 134 forks source link

NATEIP should be added to ApiLoadBalancerSecGroup #238

Closed wiquan closed 5 years ago

wiquan commented 5 years ago

What steps did you take and what happened: I have ApiLbLocation configured for my WAN IP (not 0.0.0.0\0 ) During cluster build of master node, the ApiLoadBalancerSecGroup blocked TCP traffic back thru the NAT Gateway via its public ip (NATEIP).

What did you expect to happen: Successful cluster buildout.

Anything else you would like to add: You could document that its easiest to just set ApiLbLocation = 0.0.0.0 at first.

Let everything build out, and then manually change ApiLoadBalancerSecGroup to something more restrictive.

Environment:

wiquan commented 5 years ago

duplicate of https://github.com/heptio/aws-quickstart/issues/225

timothysc commented 5 years ago

closing as dupe.