If you are using eksctl 0.1.19 with --config-file, there is a known issue with networking.
As observed in #465 (and later in #480 & #493). This was fixed with https://github.com/weaveworks/eksctl/pull/460 & https://github.com/weaveworks/eksctl/pull/467.
This issue was fixed in master and will be shipped with 0.1.20 in the next few days.
To fix the problem in a new cluster, please set sharedSecurityGroup: true at the nodegroup level.
nodeGroups:
- name: ng-1
sharedSecurityGroup: true
If you want to fix an existing cluster, you can replace the nodegroup using eksctl create nodegroup and delete old one with eksctl delete nodegroup.
NOTE: you are not affected if you are using eksctl create cluster without --config-file.
As an additional measure to prevent more users being affected by this, we have release 0.1.20-rc.1 which is already available for download. The API version has changed, it's now v1alpha4 and v1alpha3 is no longer supported.
0.1.20 is out not 🎉
Most helpful comment
As an additional measure to prevent more users being affected by this, we have release 0.1.20-rc.1 which is already available for download. The API version has changed, it's now v1alpha4 and v1alpha3 is no longer supported.