EKS Node Group Nodes Not Able to Join the Cluster

From NovaOrdis Knowledge Base
Revision as of 08:32, 4 February 2021 by Ovidiu (talk | contribs) (→‎Fix)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigation Jump to search

Internal

Overview

Creation of a new node group takes a long time, and eventually the state transitions to "Create failed". The corresponding autoscaling group is correctly created and the nodes are healthy. Yet, they cannot join the cluster.

Root Cause

The problem is caused by the fact that cluster security group loses all its inbound rules.

Fix

Locate the EKS cluster's cluster security group.

Add itself as an inbound rule: Type "All traffic", Source "Custom", data: its own ID.