Support enabling NetworkPolicy enforcement via eksctl cluster config

[consideRatio]

aws-node v1.14.0+ supports NetworkPolicy enforcement according to changelog. I'd love to be able to control enabling this or not via the eksctl configuration.

There is a documented way to enable this both for being a managed addon and for self-managed addons.

I understand that eksctl clusters provide aws-node aka. vpc-cni as a self-managed addon, not listed under addons in the eksctl configuration file, and should therefor follow documentation about enabling it for self-managed addon. I've so far tried and failed, and I'm not sure what goes on - but thats a separate topic to being allowed to enable it via .

Overall though, it would be great to be able to enable NetworkPolicy enforcement directly through the eksctl cluster configuration and not require manual kubectl patches, especially since these will would get replaced if we would use eksctl utils update-aws-node later at some point in time.

[consideRatio]

Related

• Update aws-node from 1.12.6 to 1.18.1 #7756
• Fix Github workflow for updating generated files for default addons #7766