From 198be658fc86e4e3d85ff97847adbf95c5323107 Mon Sep 17 00:00:00 2001 From: sebgl Date: Mon, 8 Jul 2019 12:20:05 +0200 Subject: [PATCH] Add a note on EKS inbound traffic & validating webhook EKS users must explicitly enable communication from the k8s control plane and nodes port 443 in order for the control plane to reach the validating webhook. Should help with https://github.com/elastic/cloud-on-k8s/issues/896. --- docs/k8s-quickstart.asciidoc | 2 ++ 1 file changed, 2 insertions(+) diff --git a/docs/k8s-quickstart.asciidoc b/docs/k8s-quickstart.asciidoc index 3d4f4e239a..bbaf0c274b 100644 --- a/docs/k8s-quickstart.asciidoc +++ b/docs/k8s-quickstart.asciidoc @@ -22,6 +22,8 @@ Make sure that you have link:https://kubernetes.io/docs/tasks/tools/install-kube NOTE: If you are using GKE, make sure your user has `cluster-admin` permissions. For more information, see link:https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control#iam-rolebinding-bootstrap[Prerequisites for using Kubernetes RBAC on GKE]. +NOTE: If you are using Amazon EKS, make sure the Kubernetes control plane is allowed to communicate with nodes port 443. This is required for communication with the Validating Webhook. For more information, see link:https://docs.aws.amazon.com/eks/latest/userguide/sec-group-reqs.html[Recommended inbound traffic]. + . Install link:https://kubernetes.io/docs/concepts/extend-kubernetes/api-extension/custom-resources/[custom resource definitions] and the operator with its RBAC rules: + [source,sh]