Allow Nodes to talk to Kubelet API Port
Allows metrics-server to function
@@ -320,7 +320,11 @@ func (s *Service) getSecurityGroupIngressRules(role v1alpha1.SecurityGroupRole)
Protocol: v1alpha1.SecurityGroupProtocolTCP,
FromPort: 10250,
ToPort: 10250,
- SourceSecurityGroupIDs: []string{s.scope.SecurityGroups()[v1alpha1.SecurityGroupControlPlane].ID},
+ SourceSecurityGroupIDs: []string{
+ s.scope.SecurityGroups()[v1alpha1.SecurityGroupControlPlane].ID,
+ // This is needed to support metrics-server deployments
+ s.scope.SecurityGroups()[v1alpha1.SecurityGroupNode].ID,
+ },
},
{
Description: "bgp (calico)",
