Add info on rancher-nodes security group when using EC2 node driver

This commit is contained in:
Sebastiaan van Steenis
2018-07-25 16:04:23 +02:00
parent 76b5990ddc
commit 9e976a0085
3 changed files with 105 additions and 1 deletions
@@ -24,7 +24,7 @@ Use {{< product >}} to create a Kubernetes cluster in Amazon EC2.
See [Example Node IAM policy](#example-node-iam-policy) for an example policy that can be applied to these credentials.
- **Zone and Network** configures the availability zone and network settings for your cluster.
- **Security Groups** creates or configures the security groups applied to your nodes.
- **Security Groups** creates or configures the Security Groups applied to your nodes. Please refer to [Amazon EC2 security group when using Node Driver]({{< baseurl >}}/rancher/v2.x/en/installation/references/#amazonec2-securitygroup-nodedriver) to see what rules are created in the `rancher-nodes` Security Group.
- **Instance** configures the instances that will be created. Make sure you configure the correct **SSH User** for the configured AMI.
If you need to pass an **IAM Instance Profile Name** (not ARN), for example, when you want to use a [Kubernetes Cloud Provider]({{< baseurl >}}/rancher/v2.x/en/cluster-provisioning/rke-clusters/options/cloud-providers), you will need an additional permission in your policy. See [Example Node IAM policy with PassRole](#example-node-iam-policy-with-passrole) for an example policy.
@@ -13,3 +13,4 @@ The following diagram displays the basic port requirements for Rancher. If you n
{{< requirements_ports_rancher >}}
{{< requirements_ports_rke >}}
{{< ports_aws_securitygroup_nodedriver >}}