Skip to content

Conversation

achen1210
Copy link
Contributor

Issue #, if available:

Description of changes:
Adds a note that package manager endpoints need to be allowlisted during hybrid nodes installation and upgrade process.

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

@achen1210 achen1210 requested a review from fincd-aws as a code owner August 20, 2025 19:31
Copy link

This pull request is automatically being deployed by Amplify Hosting (learn more).

Access this pull request here: https://pr-1104.d3rijirjvbh87e.amplifyapp.com

@fincd-aws fincd-aws self-assigned this Aug 22, 2025
Copy link
Contributor

@fincd-aws fincd-aws left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

One new piece, a couple nits you can accept.

^2^ Access to the {aws} IAM endpoints are only required if you are using {aws} IAM Roles Anywhere for your on-premises IAM credential provider.
^2^ Access to the {aws} IAM endpoints are only required if you are using {aws} IAM Roles Anywhere for your on-premises IAM credential provider.
^3^ For AL2023 and RHEL, `yum/dnf` is used to install `containerd`, `ca-certificates`, `iptables` and `amazon-ssm-agent`. For Ubuntu, `apt` is used to install `containerd`, `ca-certificates`, and `iptables`, and `snap` is used to install `amazon-ssm-agent`.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

dnf (or yum respectively) is used

Forward slashes in text break some automation that we use.

Suggested change
^3^ For AL2023 and RHEL, `yum/dnf` is used to install `containerd`, `ca-certificates`, `iptables` and `amazon-ssm-agent`. For Ubuntu, `apt` is used to install `containerd`, `ca-certificates`, and `iptables`, and `snap` is used to install `amazon-ssm-agent`.
^3^ For AL2023 and RHEL, `dnf` (or `yum` respectively) is used to install `containerd`, `ca-certificates`, `iptables` and `amazon-ssm-agent`. For Ubuntu, `apt` is used to install `containerd`, `ca-certificates`, and `iptables`, and `snap` is used to install `amazon-ssm-agent`.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Let's copy this info up into the paragraph at Line 64 too, so the list of packages for each OS isn't only in a footnote.

@@ -109,13 +109,20 @@ You must have access to the following domains during the installation process wh
|\https://rolesanywhere.[.replaceable]`region`.amazonaws.com
|HTTPS
|443

|Package Manager Endpoints ^3^
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

|Operating System package manager endpoints ^3^

Be specific that we aren't adding other package managers.

Suggested change
|Package Manager Endpoints ^3^
|Operating System package manager endpoints ^3^

@@ -109,13 +109,20 @@ You must have access to the following domains during the installation process wh
|\https://rolesanywhere.[.replaceable]`region`.amazonaws.com
|HTTPS
|443

|Package Manager Endpoints ^3^
|Package repository endpoints are OS-specific and may vary by geographic region.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Replace "may" with "might", for style. "May" ends up translated as the month sometimes, "might" has fewer definitions (still several, but its our style).

Suggested change
|Package repository endpoints are OS-specific and may vary by geographic region.
|Package repository endpoints are OS-specific and might vary by geographic region.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants