Allow using IPs from assigned prefix to ENI in case of security groups usage

[aenshin-pp]

What would you like to be added:
I'd like to have ability to use more IPs, therefore run more Pods with security groups on a node.

Why is this needed:
To make security/network management easier and reduce cost by utilizing nodes.

[orsenthil]

Allow using IPs from assigned prefix to ENI in case of security groups usage

Hi @aenshin-pp , could you explain this a bit more. How are you are currently using in your setup and what kind of enhancement would you desire?

[aenshin-pp]

@orsenthil

The following article mentions our issue at "Comparison to security groups for pods":
https://aws.amazon.com/blogs/containers/amazon-vpc-cni-increases-pods-per-node-limits/

We have vanilla EKS with VPC CNI and use security groups. No big modifications.
It might limit us with IP number as mentioned in article or below issues:

aws/containers-roadmap#1153
aws/containers-roadmap#1342

All dated 2020-2021, few years old.

I wonder if there is a solution to use security groups in EKS and also be able to use more IPs than branch ENIs available for particular instance type (e.g. use prefixes)?

[github-actions]

This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 14 days

[github-actions]

Issue closed due to inactivity.

[aenshin-pp]

@catlike hi from kube con :)