security_groups_for_pods_todo.md

security_groups_for_pods_todo.md

• enable pod eni: https://github.com/aws/amazon-vpc-cni-k8s#enable_pod_eni-v170

kubectl -n kube-system set env daemonset aws-node ENABLE_POD_ENI=true

• for healthcheck set, DISABLE_TCP_EARLY_DEMUX=true for init container https://github.com/aws/amazon-vpc-cni-k8s#disable_tcp_early_demux-v173

kubectl patch daemonset aws-node -n kube-system -p '{"spec": {"template": {"spec": {"initContainers": [{"env":[{"name":"DISABLE_TCP_EARLY_DEMUX","value":"true"}],"name":"aws-vpc-cni-init"}]}}}}'