Skip to content

Commit

Permalink
Sync #15785 add more detail to the EKS workaround into Chinese (#15791)
Browse files Browse the repository at this point in the history
  • Loading branch information
wilsonwu authored Oct 12, 2024
1 parent 2ed0cd8 commit 7fd2967
Showing 1 changed file with 2 additions and 2 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -47,9 +47,9 @@ spec:

如果您使用已启用 Amazon VPC CNI 的 EKS,
[则必须将 `POD_SECURITY_GROUP_ENFORCING_MODE` 明确设置为 `standard`](https://github.com/aws/amazon-vpc-cni-k8s/blob/master/README.md#pod_security_group_enforcing_mode-v1110)
否则 Pod 运行状况探测(默认情况下,AWS VPC CNI 会默默地免除所有策略实施)将失败。
否则 Pod 运行状况探测(默认情况下, VPC CNI 会默默地免除所有策略实施)将失败。
这是因为 Istio 对 kubelet 运行状况探测使用链路本地 SNAT 地址,
AWS VPC CNI 对此并不了解,并且 AWS VPC CNI 没有免除链路本地地址策略实施的选项。
Amazon VPC CNI 对此并不了解,并且该 VPC CNI 没有免除链路本地地址策略实施的选项。

### k3d

Expand Down

0 comments on commit 7fd2967

Please sign in to comment.