Skip to content

Commit 220539d

Browse files
committed
add EFS SG definition and rule for EKS cluster
1 parent f720ace commit 220539d

File tree

1 file changed

+13
-0
lines changed

1 file changed

+13
-0
lines changed

cluster/cluster.yaml

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -143,6 +143,19 @@ Resources:
143143
IpProtocol: tcp
144144
SourceSecurityGroupId: !Ref EKSWorkerSecurityGroup
145145
ToPort: 443
146+
EKSEFSSecurityGroupIngressFromEKSWorkerSecurityGroup:
147+
Properties:
148+
FromPort: 2049
149+
GroupId: !Ref EKSEFSWorkerSecurityGroup
150+
IpProtocol: tcp
151+
SourceSecurityGroupId: !Ref EKSWorkerSecurityGroup
152+
ToPort: 2049
153+
Type: 'AWS::EC2::SecurityGroupIngress'
154+
EKSEFSWorkerSecurityGroup:
155+
Properties:
156+
GroupDescription: EKS worker to EFS sg
157+
VpcId: "{{.Cluster.ConfigItems.vpc_id}}"
158+
Type: 'AWS::EC2::SecurityGroup'
146159
EKSCluster:
147160
Type: AWS::EKS::Cluster
148161
Properties:

0 commit comments

Comments
 (0)