Security Group

edit security group to allow instanceserver traffic into vpc you'll need to edit the new cluster's main security group to allow instanceserver traffic on the aws web client, go to ec2 > security groups there should be three sgs that have the node's name somewhere in their name; look for the one that is in the form eks cluster sg \<cluster name> \<random numbers> it should not end with /controlplanesecuritygroup or /clustersharednodesecuritygroup click on that, then the inbound rules tab, then click edit inbound rules you'll need to add two rule sets type custom udp; port range 7000 8000; source anywhere (or 'custom 0 0 0 0/0') type custom tcp; port range 7000 8000; source anywhere (or 'custom 0 0 0 0/0')