This message was deleted.

sparse-intern-71089

05/29/2020, 10:36 PM

This message was deleted.

full-dress-10026

05/29/2020, 10:49 PM

There's a security group attached to EC2 instances that are created from a NodeGroup that have this description:

Copy code

EKS created security group applied to ENI that is attached to EKS Control Plane master nodes, as well as any managed workloads.

For the life of me, I cannot figure out how to get the security group ID on the instances.

full-dress-10026

05/29/2020, 10:52 PM

I have tried both of these:

Copy code

eksCluster.nodeSecurityGroup.id
eksCluster.clusterSecurityGroup.id

Neither represent the ID of the security group actually attached to the k8s worker nodes.

full-dress-10026

05/29/2020, 10:59 PM

After exporting my stack, I can see the security group ID I'm after in a path

deployment.resources.56.outputs.vpcConfig.clusterSecurityGroupId

full-dress-10026

05/29/2020, 11:00 PM

The vpcConfig property does not exist on the interfaces though 🤔

full-dress-10026

05/29/2020, 11:02 PM

There must be a way to get the vpcConfig off a cluster right???

full-dress-10026

05/29/2020, 11:05 PM

Found it! Woot!

eksCluster.eksCluster.vpcConfig.clusterSecurityGroupId

🎉 2

95 Views

Open in Slack

Previous Next

Pulumi Community

No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.