Senthil Kumaran

Between the VPC CNI 1.14.x and later versions, there have changes to reduce the number of EC2 API calls (https://github.com/aws/amazon-vpc-cni-k8s/pull/2640) that sometimes inadvertently interfered with the previous behavior. Using the...

> Allow using IPs from assigned prefix to ENI in case of security groups usage Hi @aenshin-pp , could you explain this a bit more. How are you are currently...

@SeungsuKim , could you share the ipamd logs as indicated if you are still facing this issue. You can follow this troubleshooting doc - https://github.com/aws/amazon-vpc-cni-k8s/blob/master/docs/troubleshooting.md and send the logs to...

Closing pending the request on logs. Please reopen if you run into this again, and share the logs as indicated in the troubleshooting guide.

> The question here is why do I need a VPC endpoint when I am on public network and the security group currently allows all ingress and egress connections. Does...

Hello @Gier32o, does `/var/log/aws-routed-eni/plugin.log` or `/var/log/aws-routed-eni/ipamd.log` logs show any detailed about on the ip assignment or failure? Is aws-node pod running? Usually during K8s upgrade, the CNI version does not...

> Is there any way to fix such a broken cluster afterwards? I am not sure what could have led to this stage. But you can downgrade the addon the...

Even Squirrel Database. 

> Is there a better way to fix this? It kind of looks like https://github.com/projectcalico/calico/issues/5135, but not sure if the problem is in Calico or AWS. Do you have both...

> Invalid Kubernetes API v1 endpoint https://172.20.0.1:443/api: Timed out connecting to server This is strange error message. Can you confirm the the API server endpoint match? ``` kubectl get endpoints...