Help Center> Cloud Container Engine> User Guide (Paris Regions)> Clusters> Upgrading a Cluster> Troubleshooting for Pre-upgrade Check Exceptions> Security Groups
Updated on 2024-01-26 GMT+08:00
View PDF

Security Groups

Check Item

Check whether the security group allows the master node to access nodes using ICMP.

This check item is performed only for clusters using VPC networking. For clusters using other networking, skip this check item.

Solution

Log in to the VPC console, choose Access Control > Security Groups, and enter the target cluster name in the search box. Two security groups are displayed:

  • The security group name is cluster name-node-xxx. This security group is associated with the user nodes.
  • The security group name is cluster name-control-xxx. This security group is associated with the master nodes.

Click the security group of the node user and ensure that the following rules are configured to allow the master node to access the node using ICMP.

If the preceding security group rule is unavailable, add the rule with the following configurations to the node security group: Set Protocol & Port to Protocols/ICMP and All, and Source to Security group and the master security group.