Use primary ENI SGs if SG is null for Custom networking

aws · Nov 3, 2020 · 4424dbf · 4424dbf
1 parent ccd6887
commit 4424dbf
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/pkg/awsutils/awsutils.go b/pkg/awsutils/awsutils.go
@@ -700,7 +700,11 @@ func (cache *EC2InstanceMetadataCache) createENI(useCustomCfg bool, sg []*string
 
 	if useCustomCfg {
 		log.Info("Using a custom network config for the new ENI")
-		input.Groups = sg
+		if len(sg) != 0 {
+			input.Groups = sg
+		} else {
+			log.Warnf("No custom networking security group found, will use the node's primary ENI's SG: %s", input.Groups)
+		}
 		input.SubnetId = aws.String(subnet)
 	} else {
 		log.Info("Using same config as the primary interface for the new ENI")