AWS Security Group Setup- Any luck scoping this down?

aburck

I'm planning on using AWS for the lab setup, but I'm not willing to create a Security Group that has all ports open to the world, even if a private key is needed to access the nodes.

Has anyone had success scoping the Security Group down to the specific ports/protocols needed? I'm wary of running into blockers throughout the course by trying to do this without knowing what is actually needed, but it seems like the kind of thing other people would be bothered by as well.

chrispokorni

Hi @aburck,

For Kubernetes alone, the documentation is a good starting point

https://kubernetes.io/docs/setup/production-environment/tools/kubeadm/install-kubeadm/

However, other tools will be installed in conjunction with Kubernetes, with their own specific port requirements. When configuring your SG please consult the documentation for each tool, to ensure that all required traffic is allowed to and from your nodes.

Regards,
-Chris

aburck

Thank you!!!