AWS eks documentation change
Summary
Added 'node-ip-validation' as a new option to the `--skip` flag, allowing users to skip validation of node IP CIDR checks.
Security assessment
The change documents a new option to skip IP validation, which relates to security controls for node registration. While skipping validation could introduce risks, the update itself does not fix a security issue but adds documentation about a security-related configuration option. The documentation explicitly advises against skipping phases unless necessary.
Diff
diff --git a/eks/latest/userguide/hybrid-nodes-nodeadm.md b/eks/latest/userguide/hybrid-nodes-nodeadm.md index f0279bfe4..28324d2af 100644 --- a//eks/latest/userguide/hybrid-nodes-nodeadm.md +++ b//eks/latest/userguide/hybrid-nodes-nodeadm.md @@ -117 +117 @@ Name | Required | Description -`-s`, `--skip` | FALSE | Phases of `init` to be skipped. It is not recommended to skip any of the phases unless it helps to fix an issue. **Values** `install-validation` skips checking if the preceding install command ran successfully. `cni-validation` skips checking if either Cilium or Calico CNI’s VXLAN ports are opened if firewall is enabled on the node +`-s`, `--skip` | FALSE | Phases of `init` to be skipped. It is not recommended to skip any of the phases unless it helps to fix an issue. **Values** `install-validation` skips checking if the preceding install command ran successfully. `cni-validation` skips checking if either Cilium or Calico CNI’s VXLAN ports are opened if firewall is enabled on the node `node-ip-validation` skips checking if the node IP falls within a CIDR in the remote node networks