Advanced Clusters

Back Next

Use default security groups (alternative)

When the Secure Agent creates an

advanced cluster

, it can generate a default ELB security group, master security group, and worker security group. These default security groups define communication guidelines between Kubernetes clients, the API server, master nodes, worker nodes, and other services.

To allow the Secure Agent to generate the default security groups, the cluster operator policy for the cluster operator role requires the following permissions:

ec2:DescribeSecurityGroups

ec2:CreateSecurityGroup

ec2:DeleteSecurityGroup

ec2:AuthorizeSecurityGroupEgress

ec2:AuthorizeSecurityGroupIngress

ec2:RevokeSecurityGroupEgress

ec2:RevokeSecurityGroupIngress

For more information about the cluster operator role and the cluster operator policy, see Step 7. Create IAM roles.

Step 4. Create user-defined security groups for Amazon EC2

Download Guide

Watch

Comments