Additional security group in EKS managed node group

Question

I need a help with EKS managed node group. I've created a cluster with one additional sg. Inside of this cluster I've created managed node group. All code is stocked in terraform. Once managed node group creates new instance, only one security group is attached (SG created by AWS). Is it somehow a way to attach also additional security group to instances?

Thanks in advance for help!

Answer 1

By default, EKS compute node group, will have the default cluster Security Group attached which is created by AWS. Even if you provide an additional security group to EKS cluster during the creation, that additional security group will not be attached to compute instances. So, to get this working, you have to use Launch Templates.