thapakazi/security_groups_for_pods_todo.md

## security_groups_for_pods_todo.md

      
        

                
      Raw
    
  

        
        
          
            
          
          
            
              security_groups_for_pods_todo.md
            
          
        
      
      
    
enable pod eni: https://github.com/aws/amazon-vpc-cni-k8s#enable_pod_eni-v170

kubectl -n kube-system set env daemonset aws-node ENABLE_POD_ENI=true

for healthcheck set, DISABLE_TCP_EARLY_DEMUX=true for init container
https://github.com/aws/amazon-vpc-cni-k8s#disable_tcp_early_demux-v173

kubectl patch daemonset aws-node -n kube-system -p '{"spec": {"template": {"spec": {"initContainers": [{"env":[{"name":"DISABLE_TCP_EARLY_DEMUX","value":"true"}],"name":"aws-vpc-cni-init"}]}}}}'