diff --git a/terraform/modules/aws-eks/main.tf b/terraform/modules/aws-eks/main.tf index edbe3e1..db3847f 100644 --- a/terraform/modules/aws-eks/main.tf +++ b/terraform/modules/aws-eks/main.tf @@ -42,6 +42,28 @@ module "eks" { node_security_group_tags = { "karpenter.sh/discovery" = var.name } + node_security_group_additional_rules = { + ingress_allow_all_traffic_inside = { + description = "Allow all traffic inside security group" + protocol = "all" + from_port = 0 + to_port = 0 + type = "ingress" + self = true + } + + } + cluster_security_group_additional_rules = { + ingress_node_to_cluster = { + description = "Node to cluster" + protocol = "all" + from_port = 0 + to_port = 0 + type = "ingress" + source_node_security_group = true + } + } + self_managed_node_group_defaults = { ami_type = "AL2023_ARM_64_STANDARD" block_device_mappings = {