By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

Can't access RDS from pods in EKS

0

I have 2 VPCs, one for my EKS cluster and another for the RDS. I have established a VPC peering between them, but I still receive errors from my application "connection timed out on port 5432". It's the same application from my previous EKS cluster that was in the same VPC as the RDS at it worked, so it must be a problem with my peering.

I have followed these docs in the same region. I have created the peering and accepted the request, then updated the routing table as documented and finally added the security group of my EKS to the RDS one.

What else should I be doing?

Topics
Networking & Content DeliveryDatabaseContainers
Tags
Amazon VPCPostgreSQLAmazon Elastic Kubernetes Service
Language
English
itaied
asked a month ago647 views
2 Answers
2
Accepted Answer

I have referenced the CIDR instead of a security group and it worked.

itaied
answered a month ago
profile picture
EXPERT
Oleksii Bebych
reviewed a month ago
profile pictureAWS
EXPERT
iBehr
reviewed a month ago
0

Your applications are running on EKS Nodes. Make sure RDS Security Group allows incoming traffic from EKS Nodes (IPs or SG IDs)

If you have more advanced configurations, as Security Group for Pods, allow RDS incoming traffic from Pod's SG https://docs.aws.amazon.com/eks/latest/userguide/security-groups-for-pods.html

profile picture
EXPERT
Oleksii Bebych
answered a month ago
profile picture
EXPERT
Giovanni Lauria
reviewed a month ago
  • itaied
    a month ago

    I have allowed incoming traffic from EKS using the SG ID. I'm not sure about the sg for pods tho, I have created the cluster using a basic Terraform setup Does it matter who is the requester and who is the accepter?

Relevant content